hxxp://netflix[.]com

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
1020s
max time network
1020s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 14:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://netflix.com
Sample260809-rhq2fazajc

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Unexpected DNS network traffic destination 1 IoCs

Network traffic to other servers than the configured DNS servers was detected on the DNS port.

description	flow	ioc	pid	Process
Destination IP	1132	35.167.106.132	848	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
848	msedge.exe
3132	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307584791374359"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 16 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{7AF242A2-F57C-41EC-B1B4-C8518A22560D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{7B892E1D-5F2D-4E06-8AE6-E76780949C2C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3556	chrome.exe
3556	chrome.exe
4920	msedge.exe
4920	msedge.exe
4324	chrome.exe
4324	chrome.exe
3556	chrome.exe
3556	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 53 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3240	msedge.exe
3556	chrome.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe
Token: SeShutdownPrivilege	3556	chrome.exe
Token: SeCreatePagefilePrivilege	3556	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe
3556	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3240 wrote to memory of 3864	3240	msedge.exe	87
PID 3240 wrote to memory of 848	3240	msedge.exe	88
PID 3240 wrote to memory of 1356	3240	msedge.exe	89
PID 3240 wrote to memory of 1356	3240	msedge.exe	89
PID 3240 wrote to memory of 1356	3240	msedge.exe	89
PID 3240 wrote to memory of 4016	3240	msedge.exe	90
PID 3240 wrote to memory of 4016	3240	msedge.exe	90
PID 3240 wrote to memory of 4400	3240	msedge.exe	111
PID 3240 wrote to memory of 3784	3240	msedge.exe	93
PID 3240 wrote to memory of 4400	3240	msedge.exe	111
PID 3240 wrote to memory of 4400	3240	msedge.exe	111
PID 3240 wrote to memory of 3784	3240	msedge.exe	93
PID 3240 wrote to memory of 3784	3240	msedge.exe	93
PID 3240 wrote to memory of 736	3240	msedge.exe	94
PID 3240 wrote to memory of 1960	3240	msedge.exe	95
PID 3240 wrote to memory of 736	3240	msedge.exe	94
PID 3240 wrote to memory of 736	3240	msedge.exe	94
PID 3240 wrote to memory of 1960	3240	msedge.exe	95
PID 3240 wrote to memory of 1960	3240	msedge.exe	95
PID 3556 wrote to memory of 3500	3556	chrome.exe	99
PID 3556 wrote to memory of 3132	3556	chrome.exe	102
PID 3556 wrote to memory of 3032	3556	chrome.exe	103
PID 3556 wrote to memory of 3032	3556	chrome.exe	103
PID 3556 wrote to memory of 3936	3556	chrome.exe	104
PID 3556 wrote to memory of 3936	3556	chrome.exe	104
PID 3556 wrote to memory of 4996	3556	chrome.exe	106
PID 3556 wrote to memory of 4996	3556	chrome.exe	106
PID 3556 wrote to memory of 3940	3556	chrome.exe	107
PID 3556 wrote to memory of 3940	3556	chrome.exe	107
PID 3240 wrote to memory of 3376	3240	msedge.exe	108
PID 3240 wrote to memory of 3832	3240	msedge.exe	109
PID 3240 wrote to memory of 3376	3240	msedge.exe	108
PID 3240 wrote to memory of 3832	3240	msedge.exe	109
PID 3556 wrote to memory of 3412	3556	chrome.exe	110
PID 3240 wrote to memory of 4400	3240	msedge.exe	111
PID 3240 wrote to memory of 4400	3240	msedge.exe	111
PID 3240 wrote to memory of 4400	3240	msedge.exe	111
PID 3556 wrote to memory of 3412	3556	chrome.exe	110
PID 3556 wrote to memory of 3368	3556	chrome.exe	112
PID 3556 wrote to memory of 3368	3556	chrome.exe	112
PID 3240 wrote to memory of 644	3240	msedge.exe	113
PID 3240 wrote to memory of 644	3240	msedge.exe	113
PID 3240 wrote to memory of 5516	3240	msedge.exe	115
PID 3240 wrote to memory of 5516	3240	msedge.exe	115
PID 3240 wrote to memory of 5516	3240	msedge.exe	115
PID 3240 wrote to memory of 5596	3240	msedge.exe	116
PID 3240 wrote to memory of 5596	3240	msedge.exe	116
PID 3240 wrote to memory of 5596	3240	msedge.exe	116
PID 3240 wrote to memory of 5696	3240	msedge.exe	118
PID 3240 wrote to memory of 5696	3240	msedge.exe	118
PID 3240 wrote to memory of 5696	3240	msedge.exe	118
PID 3240 wrote to memory of 6088	3240	msedge.exe	120
PID 3240 wrote to memory of 5724	3240	msedge.exe	121
PID 3240 wrote to memory of 5724	3240	msedge.exe	121
PID 3240 wrote to memory of 5724	3240	msedge.exe	121
PID 3240 wrote to memory of 5736	3240	msedge.exe	122
PID 3240 wrote to memory of 5736	3240	msedge.exe	122
PID 3240 wrote to memory of 5736	3240	msedge.exe	122
PID 3240 wrote to memory of 5396	3240	msedge.exe	125
PID 3240 wrote to memory of 5396	3240	msedge.exe	125
PID 3240 wrote to memory of 5396	3240	msedge.exe	125
PID 3240 wrote to memory of 5384	3240	msedge.exe	128
PID 3240 wrote to memory of 5384	3240	msedge.exe	128
PID 3240 wrote to memory of 5384	3240	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://netflix.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b8,0x7ffdbabec188,0x7ffdbabec194,0x7ffdbabec1a0
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,2161091285026472533,16706325192701654192,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - Unexpected DNS network traffic destination
  - System Time Discovery
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,7296209622191289010,12686354708460212364,262144 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,6373188595340096701,5646672841612176477,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,16757147264064912977,13780169034743953392,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,12726136788513458825,12029272104445430946,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,5135508501059874797,8651664696667519887,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,9616668562398619728,17546602302024843388,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,5973016655720783548,8158623881853521452,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,14834178238511856020,4742119766536596373,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5484,i,5076701666760060959,5928150150219513256,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,8053719175629830284,883200005039181001,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6136,i,2996010417557320633,3132715924788255420,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6300,i,1139059044085143745,2840775780533973557,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6476,i,2388777437836627282,14040858165648439459,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,1442660174836652354,9789907840572864471,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,1442660174836652354,9789907840572864471,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6456,i,13798391236703095191,11232161201893427102,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6512,i,13741374815616051694,12291811053902330304,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6188,i,2165279224722536471,5965887004303078225,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6892,i,11033444411561296727,9135513311914977487,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:1
  2⤵
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4244,i,14443920727716339642,8678935110839385315,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4340,i,7846031645234592440,1198202710129244990,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,14963569125447446732,9452791721370947715,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,10528109706501773528,17895736681002093525,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:8
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,11884881282090469121,5985838831220459514,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,4706436811905615984,17676930072842649754,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5128,i,1297802131949795987,11614988883509445761,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6988,i,10284168507846180222,3335694075757279458,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6948,i,14502982032528942540,9085472803034693829,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7344,i,5202200829162619691,2581503731515520775,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7916,i,4715596447597685075,2354594380868759116,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7204,i,13631332737150946859,4457596886242914041,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8076 /prefetch:1
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7280,i,390196793579755638,592501438518664678,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7320,i,3624939321980428366,13042503776822953790,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6204,i,17552811082295346,15529332522541142993,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7856,i,3039479135084855977,10277046315738028853,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=6912,i,6930101819756063415,16590992537293764535,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6920,i,3040351421737172411,12883042448543639362,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7248,i,12384192033860518726,13189992327458620179,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=4524,i,13087440370931353425,13450674754696474145,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7284,i,12201638138844807738,17441350397706630769,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8092,i,4716084885449616577,1264537893185902895,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8412 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8416,i,1245738931457018331,10428197756249342981,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7868 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=6352,i,3549308115502894246,17692036182666077349,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,14776016416665050592,10276855945362620237,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6280,i,17952642261958968914,8896746520478505725,262144 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8444 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,15297157875595685489,4686632379754702040,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,13582814363478776997,17977337311538190730,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7780,i,1876865206725581716,14429606406953674977,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=5340,i,9252480906157193844,17278231921749609951,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7364,i,12463057543699578295,15224070801560112634,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,2926119531630974493,7772567600776491998,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=5332,i,15897992634215978409,11235217073629231011,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8668 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8880,i,1251640221431816963,5144445645382393712,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8824 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,6042058678843873099,536458965030284518,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7928,i,3817204907844484075,15964734989632306351,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9244,i,8591936587915936589,9328374712479961215,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8232 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9076,i,12151699968680388476,3482860191705204865,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=9072 /prefetch:8
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=9128,i,2644494275332979978,5301250784349748809,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=9228 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9344,i,12628836926332624503,2316678893280198692,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=8232 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=7296,i,14629772882393506388,1435409246514686293,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=9228 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=9336,i,14370119938919819254,16099143507226537928,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=9716,i,4308097299550533847,4355821579413536339,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=9224 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=9660,i,18288479755127751376,2259439581343655145,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=9672 /prefetch:1
  2⤵
  PID:6904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=9728,i,8142250561764666697,7448956034020110859,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=9948 /prefetch:1
  2⤵
  PID:6972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=10084,i,3176768203834720166,5288178024732169949,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=10100 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10256,i,5250908690022376639,5158200518616106183,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=10068 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=10120,i,15069210432740733325,7871129478230916254,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=10452 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=10472,i,13302857915553727380,4164975642477735286,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=9948 /prefetch:1
  2⤵
  PID:6512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=10248,i,10437175516268820843,826038441862722277,2097152 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=10308 /prefetch:1
  2⤵
  PID:6724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,3025121149322659747,18055363519475506702,524288 --field-trial-handle=2240,i,13781566767893415243,12987130450129892905,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:6340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2600

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdb8cbc728,0x7ffdb8cbc734,0x7ffdb8cbc740
  2⤵
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1592,i,16607569467982745056,13359608646599605667,524288 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1728 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,12093982222912740048,11046952852461867571,262144 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2068,i,1528122876480122859,7622180837009612674,524288 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2420 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,12394368095787328094,4058034803707854533,2097152 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3252,i,5565626001890752416,164030954507741570,2097152 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4268,i,1371519666091456819,9018409990036733379,2097152 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:3412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,17882598521808705125,16705385942334167924,2097152 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,627374802167415341,7976208619085774716,524288 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,3403195580771771750,490581350288589095,524288 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,14690963722996212026,16971333886617208470,524288 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4300,i,6756032145004112621,9617170726944183997,262144 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1520,i,3130990538121957660,16664635394111039143,524288 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5976,i,2592677626960288443,713577547279806417,524288 --field-trial-handle=2008,i,8851738469762878487,14851907401626947858,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:5848

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4876

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 882bfa50f2e386390f68b96d5b7c24e4fd27e8a322062086f8a7212377d8cbf7
MD5 19d4f8667d9bf04c2f9d28d01459e523
SHA1 c229c8e9a2d9c282b4e53bc009da2536fd52d096
SHA512 5e2dcfc9822d40ca2bdcf039aa42294abf3084a013949356004583c2b4af442fcb5097113a11ed81e3f39676458ff7e70293f1d945219d2f8cf347daf32ff9c3
TLSH
T175E02B99C821FC371DFD571D50900E86EA1123572760C45B3A3D81088FB16A70585D5C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 670eb1b7b4529495c12460e57d3432ceb51eee61b36b2251b5652d02cdad65df
MD5 01d209ede6d4a14dac9fd68774f34a0b
SHA1 ba360da74ea41497b04509e0333fbb80722c5a8c
SHA512 1cf00b1a9700bdd007ca04c8db9ca38c078cfa859de58d45a1c7060b797e5cc29cb88c4c7249de9c194a9cc01f032dad5b47458194ff1adf83c2ad1541e2eb29
TLSH
T13841BBF393E4897D851196E49A216E1FCD7D0A24131C3CA6C9D4AE1B53F28B2D20078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 955159b91e23c17398a85c1cfbedb0e7a14081c9dae72f0e39c014dfde336d7f
MD5 b1b3a5ea7c0c09d1cbe0fcb8b4351fe9
SHA1 83aa7a7b4096fcc7e06ed0e5b9336e261038a1b2
SHA512 e6f110ddca46216db7ede64edf56f6431c19419a62fdf157f5b32890e105e4551f4e3865469940bbdea9d4fc4033285bd95181a8f0f64e5e54897c3cec356b66
TLSH
T1B751ADF7D3E4857D851196F4EA216E1FCD790928132C7CA688D4AE5B53F2872D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5f958a6a7f3dec25b173dcead5694924c3f296eb537e851e3972db614b8589bd
MD5 52104cb364b76cbb02acd08ba3a668f4
SHA1 0b3110df8169300f159845ee95fb4e8343b811c1
SHA512 c255b382ddb71db120a15088a1997e874bf99dfb7e345fad426f928dee5b2dbd531c026cd69fc186e7adb9c2ee9a47bf5255fba7989132ebc9024ef30f2d081d
TLSH
T102417CB3C7E8867D890156F4B7152E1FCE290E24536C3D5AC8D4AF1F67E28B5D20058E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5fc322371878b49b4a93830e5a523c29812fe7ffb2252760f9824db8c92484c8
MD5 9ee62b34b715a733c2f5810577874f09
SHA1 9da2a24104fb24637f3472998c07adf504a58895
SHA512 868e88b26d7966b352f1933995bddc5537e9fe9aefa48d4694f234be28b7fb51657d08b008151e82ea781873aed22fe272a9427c372a06510fa13f97285744c2
TLSH
T14051ADF7D3E4857D891096F4EB156E1FCD790A24132C7CA288D4AE1B53E2872D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4c08c50ac778e1125ad9fe937ac18cdef9637dc393b7e4bd51f75374b272704e
MD5 25e28ac23f134b62db79fe3198ab7b52
SHA1 b1afaba8fafa37faa111bc1627f3124bf95c439d
SHA512 40ba319e3e4d68859840604a1229c30b1519674c367aec793f0563bdc316323d47090388aa1e0f2945ada7bfe7b46e7d3c220db1e508e8930d0a97d9e6dcbdee
TLSH
T11951BBF7D3E48A7D851156F49B216E1FCD2D0A28131C3C66C8D4AE5B53F28B2D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7da6ba32ab9beaf65b0a2b747dd6414e225a283d15700f03fca62fdb60dd38d3
MD5 7abe0436cafa23cfd3593132185d1634
SHA1 518c4d0cd22ce070d9cfef768a47b603fc660d49
SHA512 f364117bbd0a498bf2aaf6ff73c56a8e23bf5444df0156a5e57485ab3f32c582d0e7fdd7f4436c9503ec7033fc1f1e9a0b0d93d43d2d008a5ef7ea614bfe39e7
TLSH
T10051ADF7D3E4857D851196F4EB216E1FCD790928132C3CA688D4AE5B53F2872D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 93d0a6b8b9c2c4039c96879411d4bd20dfcb434719885c212263cdfc7e1a1438
MD5 34d27e04141cef5f59385697a2ab4358
SHA1 c35c691bbab9d36e514ff96e94d91f9e5fdeee9c
SHA512 0b9ffa0abd59eca3fdfee178c21cb974c9bfe484e1e020e70348b4b2be33154c23ae023ccc60b91a15c68357bd8f9c7c1f308454e38cf59daa3fcc448951f071
TLSH
T1D0417CB3C7E8867D890156F4BB152E1FCE290E24536C3D5AC8D4AF1F67E28B5D20058E
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 091d1f35eff8f5369772e503688fbcc8e1fb16f3fc15a6457ab3bcaf2ebfa374
MD5 3ee2a0f1d80e7b1af9000057a8c5f208
SHA1 2e2c5ea856799ce197c6bf714ddfc456e3dd73e1
SHA512 4dc2837b4e50e36f064833462a5f799208571e0f8953337c0af9e8eda66f32afb57da8b2a59020a5bea60487209aada422312af4e7081d53c10b25804f49bc71
TLSH
T16BF050A7D67A71AB40FD496A0E05B80A5C7668344A807DF4CFAA81BDE0D58E30B16457
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 30aa73c482657707af418bdd7f2f1a57840747c70fe78a1a1e13f359720abb8e
MD5 d8bf0ec4cc2783f331269cade65f1ed2
SHA1 d8486a0f98cd428807b748ee21727ba5e5592d62
SHA512 317ebefb4ffbf4dcb2c115f0642831122c7712771362cbe68ddbf3dee5b827274cb9a7295bbdc362b9f1353a56ee885d6f26ce1765c79deeaa5ab3251970f020
SSDEEP 192:HRzQtBs/83R5v7ApAPRp2l9qHsb+WNn1D0bczeAiKVyIsnAUge:HRzQLbZkUXmkwx0bwiKe
TLSH
T1DB42D82AEE10AD3B9CDBD229FE653B63E7F5103521902E84D6FC9A2C15D75CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b8e50a97b567f181459af0dfa5e252167ac12403e255f2e0423f9fa656dab8f1
MD5 de125a6d72c70261d1861f612dc1c7e1
SHA1 7782b5c1289c8f7d79c7853f9a61c0af88e43024
SHA512 10e7680aee1f7d15b2eff68c13e1a5b790b01860f0db21d75c4e852655c9c90e3e0707335104db83b58967f06a5a9733815be40992166ae93f90cfa790417c89
SSDEEP 192:HRzQtBs/83Rmv7Ap/PRpal9qHsb+WNn1D04zeAiDVyIsnAUge:HRzQLbSk5XSkwx0kile
TLSH
T13B42D92AEE10AD3B9CDBD229FA657F63E7F5103521902E84D6FC9A2C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4e9cdaaea438535e7339181fb99d0ba7a801f0e3389ed4f8ddd7bc0f9b90f851
MD5 c906557f429ba2fb99b802fec8ad23b2
SHA1 420a7901cd220d5e1562633fd40c172e7ca8409b
SHA512 25e05dfc5fcdccc6306f124b3305d78f943643faab322a3cd868031d34ba6afceaa5a7cf94c9eed8cd22fe0fd9adbc7552ecb1588005edd72d8ac6c9cd8fe1df
SSDEEP 192:HRzQtBs/83R4v7ApAPRp2l9qHsb+WNn1D01zeAixVyIsnAUge:HRzQLbkkUXmkwx0DiXe
TLSH
T11042D82AEE10AD3B9CDBD229FE653B63E7F1103521942E84D6FC9A2C15D75CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f1ff64cc7229d3dac753dd8e93c359d874cf915c8f9a4be2e359fc7a5f995927
MD5 f1c75ad3f77a7560c145a5e9d3fd11de
SHA1 f2e3d64a35ccead157ba09bcef31904d7acff585
SHA512 d424394d71cb7b452d4474d9dfc94c5d568e7c52851f55922fae5243a6b34ef749b7d1e35832b390e1909d6ac1618b779a6edcaa91e4a9d7db334a23bb74aa3a
SSDEEP 192:HRzQKBs/83Rlv7Ap/PRpal9qHsb+WNn1D04zeAiDVyIsnAUgraJ:HRzQsbVk5XSkwx0kile
TLSH
T1BE52E92AEE10AD3B9CDBD219FA657F63E7F5103521902E84D6FC9A2C15E75CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d1390f65bccf9c2ccad494c84835a94a91f422517b773628816833ffe19e2e58
MD5 f66c6f3ba30ae5c3ce821f2cf6d4f8bd
SHA1 11cba886e302d5cebf91a06d78ca30f599877e8e
SHA512 01251401f9f7272dc2860def0998dada65d15c4137844614b761c02151ccb26cc0888ab3673f8c5158ce0077b3bfb79a50a5aeacae4fe7c58840a6242ab3d944
SSDEEP 192:HRzQKBs/83R3v7Ap/PRpal9qHE7DHsb+WNn1D04zeAiDVyIsnAUgraJ:HRzQsbfk5XSxrwx0kile
TLSH
T12C52E92EEA10AD7B9CDBD219FA657F63E7F1103521902E84D6FC9A2C15E75CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 edc66fba000e64626dbb7a51e1ce46afb3688d64b889cc8afdbb32c0dba9eb9a
MD5 e907f02bca816f0ab5446ce337655b29
SHA1 75f773ab04e8966ab4ccb768955e2e6b5866571c
SHA512 2d9b0f07581e6b38ea9b9c152d674454b429338e9f4d26adbc017f32ce4106c0858d72daddf8c9a63a8fe4bff3ce6f9b45d454bbb7fb2cf8d260d1a91d7a99e3
SSDEEP 192:HRzQtBs/83RUv7Ap/PRpal9qHsb+WNn1D04zeAiDVyIsnAUgraJ:HRzQLbQk5XSkwx0kile
TLSH
T16E52D92AEE10AD3B9CDBD219FA657F63E7F1103521902E84D6FC9A2C15E75CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 16KB
SHA256 15a6fe12e3489cae1c96b38ba5de6096cf6520825d9d3e23718cfb0ecbb1edd6
MD5 4ecd781f1f73bc4a4a19868116972274
SHA1 0321c7224a1b57687ddab2755586aa64757f34a3
SHA512 20ea9ecc523f5bf19c7f9b2b067b031ddeb60cf058b34879fa5ff37a5c34eca80b7f1c7af435362a8ea8b5a4e8df4429b0102b3f73352fc341e2e02b72735cce
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcMvKXODx4+ErU31PHG0/dpS8gfmn:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7p0
TLSH
T138720A67AC4C9E374F94D6CCDC177B4FADB5015B61E988A482FA9C1903D5BCA010A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9b420352f2cfa11725edfef2981c1b8fab5b182460582cc2818bf57c8f15ca86
MD5 93f44992f2e2015c9086e37c6057b604
SHA1 ca4072b9629b02b6450a605540c6bcd299759494
SHA512 dad1de3cd492a6aee0699209e5386a93dfa83026965378f1c37229b561e71e9757fb790ee1032e192024c377a0d621bcb1d6e84c7d9e9ec02ff0ab0366c1f24d
TLSH
T179B01280C041A202C0230AF4224214A87124AF50960A1B0553E0AA32D8253918114150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592bf8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592bf8.TMP
Size 96B
SHA256 880d6aa8dc223fc68a2e2eeeafce0e29ebf8de6ded6031b1c5240442e22e6325
MD5 5963376498680954cb285c2e0f8d0c48
SHA1 02dba70c0e9f18b4cac453cfec0c428db4eb4830
SHA512 a6d213b289cf92684a92fa12630bb58e82bee64e6395919b571803fb3f550d01a433bc8f6449cd9364daf47d81b62b14bc729877d5153534cd92bc8adca9d359
TLSH
T1C4B0220AC2032322C0028BB03AC8E0C830B0CF22C203220282E08A32CC2A22000A0A30
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 642e6b6c4a760742337aecc2e23ebe6f446d3d15b6cf5496286e1fb45b211914
MD5 038cc8a120d97c449810a985be46a0d7
SHA1 70a7696f8848c40c4add6969b06a82c4bc639006
SHA512 bf9bf2a010c7b1044e84bc47b1e247b155236550f1518ebd8d5d7e524d287c1dcd545aad6e53459166010d7c0517cb4357091f57d755c924e40a155acdc6a9e5
SSDEEP 3072:NbGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMB:Im7Rkm1tYpBeh2BAoB
TLSH
T1E9C3122B5DB4E83759B5AB0EB04E0E1F1EF149A7C924EE92C8D85B0433F97CD0A45938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d766396645d4071d31cb8923e31a510a8c2c34e09afd43943302a5c4e85815b4
MD5 b8c593bd0249bd475ba4b1a3e190fe2d
SHA1 9479c4c631faaec76513355b59ac2288cfb282ff
SHA512 f99435c81b1581395490eac8267318396d184bafd78313dc6b85fc1f8f9f8a71726f566d3ebf3d7a321328f2fc5ebd2a61e36048b78153d7327cdc1dc0787430
SSDEEP 3072:YqGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMB:Em7Rkm1tYpBeh2BAoB
TLSH
T10AC3123B5DB4ED375DB5AB1EA04E0A1F1EF149A7C920DE92C8D85B0423E97CD0A45E38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2811e5b3f28e9c48b2d730c46061f3354fc3b4618cb2dbd927da52a8b0b4bef9
MD5 a9cdcdac599fe9947b5373f43271a9f4
SHA1 970d1e49d112caafd81520ac26ab512e7e189108
SHA512 92bf95f90f150af4c35d85afed50c66450d5c1036cf07102d156a7cdf6ac9b746f152de1f4dd56cc0140a736ab8cd5b16c1cb7fb3962daa0736df7ddb36bc798
SSDEEP 3072:NqGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMB:Tm7Rkm1tYpBeh2BAoB
TLSH
T121C3123B5DB4EC375DB5AB1EA04E0A1F1EF149A7C920DE92C8D85B0423E97CD0A44E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9bc1d7c261fea7ffa2335e1b7bdbf0682c86d36964718ccb35e5451689358861
MD5 c081d9fa4766a349673ed3ac825bea06
SHA1 cd940c57d5e2185896dc1c51f6ba514ff3aa261e
SHA512 36d8d644e91206fc035250edfc2ab73d873313ffc6d17da31d7fc83d5739648be55e2480e605dde35c2a29abfc213055b16176f75a6aaf3642422e008b3ab24e
SSDEEP 3072:ApGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Dm7Rkm1tYpBeh2BAog
TLSH
T15CC3022B5E75ED3B5CB5A74EB08E0B1E2EF149A6C920DE9288D85A0437F97CD0A44D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 2964ab571fd4e6a58365a00aa2740cac32073500c47aebd618370618c43b7777
MD5 d440225200f285dfe2625c901221327e
SHA1 995ae632f56b49abfd4fe4b106a53e054bb3154d
SHA512 a122ac11fbf025b17ab251ee2b275a0d94d1f02b5cdc814866b0c066641eb92b4ee4fd61c634ccd7d26d093f53d5be8beb1560eb156d94d96a5fb10ea44841b5
SSDEEP 6144:y7X4NwhgqKR4ILo59R57lOYo8tm7Rkm1tYpBeh2BAoA:moNweqYhLw/7le9oBGcAoA
TLSH
T142341272DD326BB95CB9AFAF30091E2A0EF2959EDA58F946C8D07A04335D59C4708D3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

5d1db024-9065-43be-8c30-2ed0e6bfdfcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d1db024-9065-43be-8c30-2ed0e6bfdfcf.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 48e0ce3dcda97192fcee2f173140236f39df4d954ddc1ddd2fdff84453ea0b6b
MD5 7a72f2ff8110c59e40503818afc208c9
SHA1 cdf34a009deb59963b5dfd5132194583052526c8
SHA512 89e032b1fc7366a8b6059c595d15ecd15ea162239ebc247bcef650a5e9621f9372be8f22a86ad932b90b83d9566c25646fea60ebebc1ec06d49a4fca221dfb98
TLSH
T11BE020C805CDC25E655064875174970CC6C0374FDBC4E94557008DEA714614467D2DE0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a2fa6f55a584bc0457caeb7eea1f333a55095ba42bd0b0b15a77115d3f7d83b0
MD5 6f1ff52b31aa7bf1f8a176e2b6911e3a
SHA1 4f33b963313345772546e1ffe5091b51126b7484
SHA512 3970a23c6ac1e11fa0f872a2dc921ab0411652456d6c526851854395316f36fb83d47cf0b502cbdc0733d8bf46f364db607202ceb3ca6dcb9382841f04edef9d
TLSH
T11BE020C809C5C29DD6446447527C970CC3C1364E96C4E9071704845972C1140ABC1B60
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 32e3aeba74011b2e704a07667790c91927b55e415d4205b44e16ecb50011b7bc
MD5 48bf75651df6d399a17ea0a094a151f1
SHA1 038a4173fd4882ad5341ece01916e8fdbbe5317f
SHA512 3a71612f64a5325f8421f36d4364ec70167e969d0d3b06ef3e51216499fbe1531a3c99a7d09d389402b8b749be5be9ff84edf49441426a5b30b435173037ee89
TLSH
T19DE020EC05D5C29D6540E4C75178970CC3D03A8E97C4E9171B048849B2415456BC3B60
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 66KB
SHA256 3d9a661f6ce5bfcfc9181c8fb5969675d19f16fc9010f34df7a989e6ffda1bb3
MD5 e32c2cb7a32e4a1eeae52a243b9be40c
SHA1 63f78f96456e17f260ce71e97016718a844266ab
SHA512 8a2b19b76087628775c2f58f0265139c7fa08c00e6a5b48d3a97e52a322e518c577b68c5e94fd256f680963c3f86dd3fde1bc0fa4723d46cb7a7e68596f8909b
SSDEEP 1536:HHom1SvnVyuvMdXkYchznTwXWTdNl071R8lJJ/KKl0y:fStyua01hPJTdz07EfJ/KS0y
TLSH
T1B663128C338E0A2B718EB006E9312BB2F68D5E36FCA76362A56287545530CFE18D4073
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 38KB
SHA256 49e64d3ed6fa7cd75bd9e1d68a4a6db1667e4706f6354a97bf562dced5c78464
MD5 543599d2ca352c98f24b367fed1efe87
SHA1 a478e6c9c448b507158198b2b9936c8fab198cdc
SHA512 ad6705236eebff2e182a7dc1a1163741962ca6d87e485663843a4badece80424fec831260826f95890b1d4663026198ec5646cb5c7b9ed813374627ec2a96147
SSDEEP 768:GHRXACTGqn4j/ADPN0Qo7pPg0gbCy6E9pvZwcWx83rmnbhaRbRkhQl6:HeR4bA7CVjgbZpP3Wk6b8ruT
TLSH
T1DF03F1AF2B7D6A752F2A9394013F0AF4D48DE01E3465A158A26721F97D2C8D7748B0DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 27KB
SHA256 a532ad904c3fec0d0f77cd275dce6fb52e352c68cfb8415b14534e9002c6cc71
MD5 e2a659dd5d5285babd4d0b6183cdee76
SHA1 0883761d419bcbd03eed3ede0e68d67ddb2c4047
SHA512 28c2b7c4ba1b86ba1ee2ebed272c26bc52173791fd5c73706038316233bb5fe81133d0ed31e79ced8c15796171c076f4b0115d010524bdf3280b96c7b445b6e1
SSDEEP 768:36YyRdUudXkVdKakI9rKLQeCyoLewGmTLlyUSHNlZr52kT:qYyRj0TPkI9rKsP/LetAMUSHbCkT
TLSH
T15AC2E1B6D28679ED15F5270F13761421B5EE8F7DB74C0CA4C5FA68A08401BD1B3C28A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 18KB
SHA256 0b0b6b9a609ad590b762f5387b6fe738f088f6de44958a2c18e83c4c77b2c293
MD5 a6de8aaa649b48de6f502e31325834e7
SHA1 094523471e301d68d7c5aa6f85b12bd22154c6bb
SHA512 543d04c961d729cf2c34eecbc9b693355de6c8d93f8db26ef34d078654f40ff616be52c81e63728cb9bd9753dc90c7a75942384d31a0b125bab64ce93a50be74
SSDEEP 384:MmB9mbq33F99Is4JqKH2G8FT1+5PkXUEmor8osrkK6oZKZUafA:M4mb2lCHb641kX7QosQ6KZlfA
TLSH
T11C82D0EE909B28E0633531993BFADAAD55F725E309917637C33993C1AE14F509E21B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 205KB
SHA256 b983a99f57f5224df4efbb26621ad52cc2a6db47659070f3771896720122bda1
MD5 0da4d4893c8dee9c82e7cac7adaaccaa
SHA1 972c4788c1baf1d501a15ea97924f2fcaa0e4727
SHA512 5ca4f6d90f9c72b52c601483950ed601b1777b6ce13b9f762d84db88a9ff4254a1d615492a0b8e6010f9a601ecfc34fa5a37084ab2e6bafa0d2c35d0a9445a29
SSDEEP 6144:7i6vwlZvgb7EOs+rb3sLnAKjgnKGyAs4+PfexsS/o:/vMq7Ns0gAKjgnKGyV48exDo
TLSH
T1ED2423B1B3513360F7567732B3EAE8A6E2EC898A9C58C3340AEB97179B5C57045D42CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f1
Size 56KB
SHA256 631ac6b47af403356db81376220724c58604074ae4e6312f775dc5783ab6ce61
MD5 95219edc7f5339209a4b0e69d3a3b5ae
SHA1 e95736dcec5ff384bf23573cc0e6e72e2f518da8
SHA512 b989653d617e404b92dcabafd7489a596e3fc026b675b0abef3bd9d8fb338c1bc8c629deaa1a46a30b0975fcd712c8a18533dad983ce8aec14b4f4db078d6d8a
SSDEEP 1536:xNA8L9B6UDoJEHt7fJb+/wN65MFsNaxWUmR0WNmCo:nHpNb+/p5vaxWt0Ezo
TLSH
T10B4301E313A523334A9B6D7C101E5B175A973B2A3F2C84EE57A4426D7804EF89D20CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f3
Size 17KB
SHA256 7db8d29c8169f3611a9ee9f05f9d3fd5caedc7693af33feb65f436a80bd33240
MD5 24ab21da3b67f721475e95ac2770dc21
SHA1 b964c8bdbc4ff708b283d9e052c1bf4947b29e09
SHA512 45e939b7bbc3b7ae47ea3b778f4ddabc3bce06f0d3fad4d2f1851fb43597e4c2b7eabd0678110a20a0181709b7dd039191adbd40e7b6f1588f2a3d5024268a27
SSDEEP 384:8KinigLYvNlzoASrDAR/Vy0CbVJn2esg1OZh/3ie:8Fi6YVl+Da475sFf
TLSH
T12D82D0556096AA71023FFD477D0243ACC69D38A8B4D7EECA5930AFDC08296D1D64CEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f5
Size 46KB
SHA256 fb1f7da31b3e3a52619ef8586e9fbe2a2d08608fa4075a3b3e54006db1affa60
MD5 8a0603a7b217b3b806642b5fa5552951
SHA1 947a90c7869413b842b88011eaf81e4b76f10111
SHA512 45a97b0297ee39679887ea5b6aa432affa9fc97acbfd44556e5da3e8e24f0a7bf162ad7fb5bfe00118d0c73ec6ec1fad55071f81ce882148c6a814d3c9a6a731
SSDEEP 768:kXpPULjakGUNTbU5DpU0fDYqF77iyq0NXtvLaTMvmUDcdgODKFkdNaR9mqh4iqev:OKG8NTbUHlfDoqXtOTM+9dghR9mvEl
TLSH
T16223F206E1213FA171E17F25C7DA0842BC6F4DB52C9503A8B8B9AB5A1F9453FE4906CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f8
Size 256KB
SHA256 1a51a39a0181abb211af41600112378aa74b3c924fcb662ebd001a647233107d
MD5 455327b5819e32b79e98198399ec7a18
SHA1 43a90a3d3a2d989910edbf818393af1dcba2fe01
SHA512 f49ff3cce466d2e8a38cde077a149d342839f9531c9b4e801725e06bfe0cc01ba56d2c807cb14f584fa53b905616952a2029945bf808d110cdde5f3ffde80645
SSDEEP 3072:XUEGjRWiiI7+mJEpXj2xJZwVvWqRUXRf2QT3ScwuA63NonSznC3V:kvRb/6p2xJBmUXp2a3fztC3
TLSH
T1AF440250EF046AA2CE124BF4DC692F3359B551DB20D0AD0A8BB9DA107EC6193F70779B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f9
Size 256KB
SHA256 66e6e211d1e357491f93e54918d9c19378a55502f6c18c6ca3c9358c7314cae3
MD5 a4de599899fe7c867999d22f968a5a0d
SHA1 a09cef62d8fe44a5548309171cd54f70e26c253c
SHA512 e941a6a2e2289f15af2023986bdb2381ec2be10a313bb920bd365b7bdbd7225e7f59e2e1d1df68dfa7a132e86346471ffc3c9ccf648724ddc41e496fd9dd5175
SSDEEP 3072:Rs4TZL8Anp1T5RLQSeUZRsYFWadyP4v9WUw0o6yed:7Tt51TfQqvsYI/09Wzh6t
TLSH
T188448D75FB83E782DF931ABCA03C2E331B9511C560C5490B4AA35C21919CB75E71BA7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fa
Size 256KB
SHA256 e3e4268545e49178c95c3ce577f482d929b4d3d2529002d227e1e4a4a4179020
MD5 9016673ada3309136cb419910553b486
SHA1 d3699bf16abe8771e94bbf5562babee9a3146e42
SHA512 6c590fb10b73d27e6fbf1367d969a6367f71574fd3bd1c2858ffd03711c16b508b2488cebc2234413534cc883ce09f9028fb2687100d92b26c6eb3e515fce367
SSDEEP 3072:ya9c1xq7uKCqFGJGXkg4RrgrBGryyzDFfQdJhz8WzJcjfV:yec1xq7uMecQWrGH/FAJxxzJcT
TLSH
T1E444F1A5FB41E283CF537FF1F06C2EB30B6956C535D61E0B0EA25C10A099A15E72F52A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fb
Size 256KB
SHA256 542ac655cca6f4835f0752937b8144fa3620dfec1b42b5277470217010a621c0
MD5 c21d5d29eb3014fdb864f388b34145ad
SHA1 85f724b019e8d04f50b336631c66f788c2b8f651
SHA512 a67da76326688dcd2de7ab513669246bdaddfda93635de9ef7db820243f3c4087e6166836f8b9cd09830873f0b375d2b720241734eb50d5cc8340d0592e9dd3b
SSDEEP 3072:aeE4Sz4c+ygjpraJ9XQu7fZ/4aUe+w3O2jD/JQw0hHyt8Vn60pGt:Qz4TyXJ9XBfZ/4aqw3O2mRyB0
TLSH
T166448C70F7C3E782CB431AB9A07C3D771FA504C562C51E1786A3AD219098B6AE71B53E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fc
Size 71KB
SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
MD5 8f850aaafc8da0df7f8f0a0b682a934b
SHA1 ef55df2e866abed76fe19b05ceb51c1147a6961f
SHA512 15160500824282d1e829908670dc7405abeb4d571ffdcf94532f55294fce77552c832f27fc14b91141ffd2aa142c441fd8e48df8e43cdbfe9283a043da2460dd
SSDEEP 1536:m4kLBYkMICj9ZBz3ff3Vpsrc6gy86ywUOWo3xmWVNKz/8A7yWuBKZS4PHS:elsr9Lrf3VGQ88hLoxPq/N7y0ZS4Py
TLSH
T14573F15242B8D90C1F6550E30BAA1EF1CD6B18CB94D4A0CCE8C7EF9DD259EAB4D66880
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fd
Size 78KB
SHA256 87f0d4a53dc62a7f19ce9ad3525738bbec696263f64449899dd8b63d4c315621
MD5 2a813eed090eb1a21a62a841ed91c4aa
SHA1 39cefb1a083dd4413c7d944b34bf59708987298f
SHA512 e804cd9e8557c4d25a80b7c73105d36cabafe670f71bf74599d06496b3f9dc6932ab87388a31a432508c0418861216a6e9c4574078d55b7a9306b8a83696d598
SSDEEP 1536:MvxvqW6SMmN0C8w0X/qUgO3ra14vueEsPLXgr5OqZBl0MIMnk5xA3D+b:ql2CkXcSrA4vHE2LXgr5OqZB+M0IDo
TLSH
T14773124A41BFD161AEA8FD887BDD30A96A27394C8FE2C447AC9D134D4EC5E3D16C3189
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fe

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fe
Size 69KB
SHA256 3bcf8b71fd3dfb1c92e73f3414fb84bdab28948dc618e271e0fe01350132159f
MD5 4e8d28e2b7e2e6a44937db6cbe9d2907
SHA1 ce464e5484a1cef93e10221c3705d80f7133018f
SHA512 95734e5ca68d3571be3d386f79d60fc02ed6302304b6a672e7251e0498edf31622dd62783d9d250122e34c157a85bcc5aee834881189a862657ba58a277e76ef
SSDEEP 1536:DRBlzOCfrtwlDzFSnP7rDTzPXUMnzYVaNkKnCpYpZ:tBECfB6zFsDTzfUYzhNkKnCpYH
TLSH
T10A6369DF4FED00B20DD04368FD2590DF9BBA9A29D9E616CA0577163F590812CB6AD83C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000107

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000107
Size 22KB
SHA256 dcb7fbbf8b2e69bdf8759b42325c7e2733bb5214beca953c0a796964b3ff1433
MD5 abc1b24e6df855684397350412a71cd2
SHA1 75a4a1da33168690a23ba4fdc2d8e6c8f46da427
SHA512 a1efdb12a7782e4a0185ee8d9b59e8a59ea3db6f42f8739dcae714d87d24a7aecd18e4f9c8ffbb885b91eefdf6792bcfbed7ce4ea3d92dee881d8f133ac5f208
SSDEEP 384:QCCupNtscAynmsSu4i2FjaDYe3IC2diATFuPwmToeYpGKPd//D6TWBIeX2Cfy9Jh:QCZ4uwFeZ9CiATFoTGGKPl/maBH2CfSH
TLSH
T1ADA2F2DAF99D39E4DC07021ADBD44700D89E7265C47F6D972321CA70A64ABAC04CD8DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
Size 18KB
SHA256 ad2483a56557a1ca259dccec7279591abc39b9565f3513c676384dfe060fde4b
MD5 15fac14dedb96ecf1077775671d31141
SHA1 58e8b251869ab8d9c32ea3c297d6f438eed16dcd
SHA512 8eb98407a0afba6b2aec5188883bd129d00e3559a6705e1b1843bd4cae9081a4faed6af5984a29f38f9c4a0cfd548ebe5f29f3aab6942c34e21dcf1e33c065aa
SSDEEP 384:1p/7GUPciEEd227+e8A/cMYIxK82an8b1LUFQVUGLbT46tBKdG8rD:37GUPDEEdlKe8AEs7zfQT3EqBK0Y
TLSH
T1F882D0B84EBC3B5673618B7E42C4B251A87668C30AE4AE38EB35DC337C125469D25353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000113

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000113
Size 26KB
SHA256 05049aed8908e2fc797b6b7261446907052c0ecd4d4b56f5363855539602a866
MD5 29967bfd755997399c807d451aac7dd4
SHA1 64f3d31036a95b0ebc9876f0651ab1d278465038
SHA512 c41784364586cab24ce6180a3b33a28ec6e62b16e873a8da45037e1e77a9943968da17b3b9731c6e1232c8b6f05d305d2a50504b67b8f4c519c0635ff49819c7
SSDEEP 384:3GIgljiCO1pCDMS+y4j2mNJrcDCXv1ft1TeIZFuGeyPhdTG4zreqyPQIXiy19:3GIgpin/MxmNJ8K1/RDuGeyPnrCVXiyH
TLSH
T13BC2D0695FCDDEC3BDC7896587066F0886C48EAE7895A340ECCF3F58C9F91559400879
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000123

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000123
Size 24KB
SHA256 895fc73624a60122a5e6eb43d0d9f295fb816abfc72a17c8c03a13dc56420f75
MD5 d22d6f5e59d7191a9b52eb33fb1a0aae
SHA1 15458728d95a7745de4b5b0ed58ac7057495ccf3
SHA512 6dc8986c2390cb438fc10b680c0b2a51a96c8e0eaa995814f51af76dffce9ba6b5bb0e88e1b7cb3539a05b7fbd2822b57d0e5640a95b3f5a51a94b69975f243a
SSDEEP 384:RKsmGONdO8hlT6v0Hpj5rWavHyg1EDPl5b4+5JmYetvNHxy0a7mF0/MP:RKJdOPg5rcTbAJt1Hxy0axy
TLSH
T156B2E1A6781987315DF260E25A09AD7CB51789B9832BC32FD138A0337ACBD4969D3C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000127

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000127
Size 30KB
SHA256 a17454fc00a5dc0dfb912f684a195248f05873a49aa474eae68322c17988e88a
MD5 3d7836f419b0e62f4bd003e36f9cae4f
SHA1 ced9e558337da53dfc2c46ec20dba9fc50ec784b
SHA512 e52c09857897f32c147e40b0b4435fd1b1d425bdb54556f9cfbfacd6a0bf85c6c6b2a0595ee4cf5c6facc404bfa41c58579a13667385b856d001efc888855022
SSDEEP 768:gH79s78LMllp12QtXE/ruO7oXZiGascjAZ7oz+xoK/T89d83A:MCQLMlFrdGn7opla7jAZ7oz+xPT8Ww
TLSH
T185E2E10DAC0D07E1E6E8D9C7BA4D409BA27E2F0614BD52DD649B9A8DFA34760CFE4D01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000180

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000180
Size 24KB
SHA256 b16f1e0fc8e61aaa09edddbf1bbcf4f26ac16cec3b0ac15f6210c014a355a3a2
MD5 f8ce781f4e16885ecc434963d13adb5e
SHA1 32c74e98d8428b290d7c476b5c12bfdea924e092
SHA512 8544baf986a1e90d4bc81b42af3081f4df8ff2cacf6c9c6f069d2e7e1690b7c989636baa92ef78221f921230fb8082792de3b07c51978bbd6ee68d3ca7c8819f
SSDEEP 384:aoxXQWxZqd3PX8r9AirDKXDHO5CkY//O9VUj7XYt4VuP10bwa88G+CRK8lKn4wW6:aEfx6fE9T6XTuNVW7XqMvcYt8lKnExq
TLSH
T190B2E1C16917B94EF901A3A526638C9372388EC86611C40F16847F73EE25E6BDDCC57C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 7c22094fa53f7ae4a8df6c1c3e13f6c795398cf641a793a33247fa8ee0352fc3
MD5 cb05c4ffda59c4b141a0f049d7b98408
SHA1 f0875a6654daa0980033c1addc273dd7e9206229
SHA512 5c0e8b41dedc80a589779618d9b45dad238d0352c92e9981b3f010183d332f556a0230d71c3f5270bf79f1be1a97729874b327256cead497df70988cc9929282
SSDEEP 96:OFmGbr6Jr18/MTgvldtYByZUAbKFvMu9ndhLexcMceKcgniw+omVz9JmacwNpyy2:OuF2FZ2FZexc6hgniw+omt9Jmpj62
TLSH
T1C6F1DAB7E1873B6CDB116DB324D9886E3A3450E2F627CECA4F449E30654AB899DD420D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 11b1d972880a9be0ba36fd7f501eb9d86560a83d751032866579add9cdf79eb4
MD5 7f6176107d1d8aefdd89f1241b47d90a
SHA1 22e5397b56c5a01764c820c7336db0d4b3c64728
SHA512 1893c1ee184c3f44dd8e57092e04fa3815973cfcd28cb4f6e10ccdba243fe442969ffb2da4841913e13b217cb1f26906bc44bc8134cd924b7b691170a0bd8a2d
SSDEEP 192:6O7toeZ2C0vduDZ24TihQxlIVbSPRgniwCivybe3kd3kdMt9JIfPRtakpbt1pr:VLgsZiVyvB6pB
TLSH
T10B222FB6D1C72B2CDB116DB264D8886E3E7450E3F5278ECA4FD89E30614BB899DD4309
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 fa12d2203cd309da97fded9b1fe18e200e43cf726c0acbf157e342e4f98da6ec
MD5 8ef005e453ce46158ac3d4f2c4f76c70
SHA1 4a460231fb0b88e92dae7b078d2ebea23b4d5e8c
SHA512 cdf58e080a76b4cabd2188cfbaaf84b638a45bc3e4779da6b026fef6b6ac2844185f8f99fe25ebea8a74efa103bd262a19470ed98c5b0bec148e2d5324badd17
SSDEEP 192:Bnpg70puQr4k7xxeh072Owp+CZuuxCvL/l+tN+Wsniw4sk9yrnWDmZ7q:5pljIJu+Florb7q
TLSH
T122325FB2D0C72B6CDB122C7254D8892D3A7494E3F223CE8A5FDCDE35645A75A8DD8708
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 d3fb449399ac759802e9a6ec934c761c06af2bd2373cd124000c9bd06240f220
MD5 77a2acb48af97cfcd59f8f622eb5b9e1
SHA1 c167adfd8a936ff31f4301373284a5de74ed5331
SHA512 960088130c4a9f385ec136f3ca67bd216e7cb577450ac129401860d8abf895399931f346fc1dc7684bd8cde3e0181cdfb46a2092947367f3f259ebd9b8791b11
SSDEEP 192:IU2XggAXuBPkFxxrU0LlX/rkEH4Uvp4CzxtNozaniw2X8kpfWcTWHxY7X:I7XBArmIx6FRBl7X
TLSH
T1D15230B1E0DF2B2CDB112DB298D68C5C7AF564E2F1138E8E0B9C9D3C15867598DE5B08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 cc408fa13b5e87bc2419effd4d870683357a7d7fcfc95952ca46a1dd30a17fbb
MD5 666629aab4569a9e3ed12ec0b8e40f42
SHA1 18f556a5c199503aeecf9ab1af0c902f43fe6507
SHA512 e112c780f795b2ac801dc5f45465da90c61fa158dd5a3d66d1a690d0df19adfcd5c3f301d018506d3f20fca15cd8139a130ce22c2292355ae4cad708aa9df9a9
SSDEEP 192:wopg70puQr4k7xxeh0vrbZp+1suO4xCvL/z+tN6Wsniw4sk9vrnWDgZ7/:JplTP9mw+5l1rF7/
TLSH
T10C3251B2D0C32B6CDB122C7258D8C92D7A7494E3F223CE9A5FDC9D35245A75A8DD8708
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 01212c080ebe7b55dab5fe2e768403fdd5c72f62d91db3ac5902bd53b0ffbeba
MD5 7bffb38a7820f68c1ae97dd9c96ac180
SHA1 7468a7aebafd554907b74187ab46799edfb8948c
SHA512 840997f70e31cb5af7981144844da6f239531b63333a9729a6d6a4f8d627d1b8feb9aa33a4279d628fe49fa833d6b9219cd5a1a23caa4bc9a46103a882e7e105
SSDEEP 192:qJXggAXuBXkFxx0U0LlX/rTEH4Uvp4CzxtNozaniw2X8kpHWcTWHxf7C:yXBA7mIx6F9Bu7C
TLSH
T1725240B1E0DF2B2CEB112DB298D68C5C7AF465E2F1138E8E0B9C9D3C15867598DE5B04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5966fd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5966fd.TMP
Size 3KB
SHA256 968aae279b8a449e632e713522e2271a0525fa2f14d1e9f81aa5f153de8a839d
MD5 8d01995d3477b8087e027219637447fa
SHA1 51d25b7ae013447d6850992b52db1285abfabad6
SHA512 4bdf208879650ba5e475e836f330732a180476d3f85cf7c1f0a817c1d4d9566a2df420bdb31de3e5f4152904cbeda2ebc756051a744581429f06da6fff02d6b5
TLSH
T1FF716F3820434FB9EB22A17388CE209D7B3082F4F4125ECD5CA4E67465E1329CEC6749
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 12KB
SHA256 e6cb298f2d2608cce47a3bdeea3a4531f2006f9a6805d63a95344ada6365d5f2
MD5 aa910efa0995abb7734b18dd694047b7
SHA1 4f8ec59415bf6bd88e3d1df60face11303468ef8
SHA512 0db216c4dccae89d93e41ecb8d803894b3c66d20d3a56d4fd8733a9836329be25548281317468d38847cc0ee0b1a096f76b00347e49085f9225dcf0587e3b0a9
SSDEEP 384:fBuC6lSFoD+yeyyJv/BlFkVufvDwD+54M5bDxzokM0Msz10:JuC68FoD+yeyyJv/BrkVufvDwD+54M5G
TLSH
T1D14245A575E5598CF63B4BFABC711BD44869BD987E40ED1DA0A0318E8D74F408B33E22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
Size 345B
SHA256 ffa5c812aa640ba17f28570e1fd8c7f9ce2e47f9415b2569e5fa71d20f04176f
MD5 f259ed769451ba9e7d97ceb297f3ae74
SHA1 bcd4bf1c12405dad5b32ea20b68fe3c7c1e8c2a8
SHA512 9c93541b35d885ac8740126d5abb70e8c01ae3dd004cc3881c54d970684d0650eddfbd1b364b4ce75dbba9d16cce62dd9cca3a35d88c92c318c40c8dab7487f8
TLSH
T11EE0687CC4C9C92B624810DB1830FF0BC5A3324F9AC8EE410E0CD8047182144B86D192
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

4f581cd8-769e-48d0-8b9a-e0d675872079.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f581cd8-769e-48d0-8b9a-e0d675872079.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 886c9b34682aa33cd23d8903ac162ade5fbd258905cd7c68f0c8948c580dfe57
MD5 0f5092d93020f464945a9a75875c9ddb
SHA1 3dca10a8833b36cbcb38c9ca90a6eb72fa5ade79
SHA512 0dfba99906b47cc8065ad9c5fbd16752404ade6293308ae3a3f2576bed09d63e169d11e44f1ac69becb9327324d9f764126519b1f998f9f7ce0e36c373736f89
SSDEEP 384:D60Kl76cF1eGHJ4T7CZfCEQ3xk4NigY7lvff4GxC75amskJqEHAaVR7zOx+LcKC2:M4ME1mTm/
TLSH
T1614299F783F5862DDA11A5F4AA18AF1FCF1C0925432C386A85D4AF1793F2971E141B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 28KB
SHA256 6747afaed8b4c4be126f4c53bc7aa30989c2cc70bddb87bb108039dd4c46df0b
MD5 b6c9b31adbdb6a66831940adc2904d64
SHA1 bb0fb505c87896fd709f63c06d3bd8836e9f6ca3
SHA512 8243c1c62c2b2809b4b2cf43ae8eaf130852ba438342e75d381e507315f896d399f99bb674a84cf0bfb031217391b817e2ab0926ca619914d2829a410e7780bc
SSDEEP 384:D60Kl76cFMeuhzhdeeZeSdte3ei0ZBeabxv4gKN2BeIteHJ4T7CZfCEQ3xkpY7BN:/b1J9pIeobxqhEc0sy2
TLSH
T10AD269F783F5862D9A15A5F09B18AF1FCE181525432C382A89D4BF07D3F2971E142B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 26KB
SHA256 4bc4df14538aa0c7f8eb9bd78de0aa3c1aeadf32f5e050887e1dc808ece9d62f
MD5 82cd2d6146cf79753d4d03d0cf4626e2
SHA1 fb19f3fc896993d1df9188af5749f3f85cbf5fac
SHA512 76fa4eb8bea4c912ccff56b290b9cfec7547b174cc86c17fad63c870775ce95f4a7ae267f0e53fb378e8040a2ffee62832ef0a908322aba5831a1c3e73c7dd2b
SSDEEP 384:D60Kl76cF1euhzhdeeZeSdte3ei0ZBeabxv4gKN2B2HJ4T7CZfCEQ3xk4NigY7lU:WbyZ9p5eo1lyhETc0VR2
TLSH
T162C269F783F5862D9A15A5F49B18AF1FCE181524432C392A89D4BF0BD3F2971E10279E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 27KB
SHA256 e5143c3f5b751eb82a5d860d823eb410398e749628bc4f71603e7c437144f005
MD5 725ea072860e312e0c09bf92ee1425f0
SHA1 d2c2e531955d39ad1f72cf473185175a6e0500ab
SHA512 12f405ba10e52c99408190abe005c002694c3c3a04d16c39c3f662d2646e2c4d1cd1a3206a75433b42326f9c25dadff7d8ce1153214137a98be70eb315821df4
SSDEEP 384:DWX6OStxJ5IXhzhdeeZeSdte3ei0ZBeabxv4gKN2BeItW+Mr1TYCZlCEQ3xkpY7q:ibJZJ9pIeo/UhEcnMAj5MT
TLSH
T112C257F783F5862D9A15A5F09A18AF1FCE181525032C387A89D4BF07D3F2971E142B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 48KB
SHA256 18f5de0cb5d03555de0633bfcfa4203c5ff3a44e8bdfaaefcfe73111163ea63a
MD5 42689917fbd0748d9f8b3463bff33647
SHA1 1ebd238a9bbcff18abda056ac74f2cd6847f4cbf
SHA512 437721272ae9fc1eecd9382dae6fc1b93cc8b3b35108fcd5f9cfc98d5e99f409e652b8cc32e422d90362b1af01e57e2d00f435b54c92a167b8d7bf9e6984be39
SSDEEP 384:DW6OStxJKhIBeK8A1cABeUtW+Qk3UrvgT6e5eJe3DAEu8eaXCJhI3W6ci277a1Ba:39Vj2JmDoo3nZADlRGHkMuIyC4Om
TLSH
T104238BF783B5862E9A11A5F09B18AF1FCF181529435C3C6689D4BE07D3E2832E152B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 48KB
SHA256 f64d5f1ae39ce69c4a21d07bbcde4b3c015eb5f76ae3d41f5391ad5917f20cbf
MD5 f6acdffaec64ccb70da866d26e609863
SHA1 04bd01a5372ade3bfafc039d379fbccab06a041a
SHA512 d4f6e1688b9a543051080a2cf8d9f0b4d69e4f2e47128678cf7dc571a122655d59db0dd092a06c820329de3ae79ebdfa2be9a365bba0a80bd5015d2f5ba1bd99
SSDEEP 384:DWOStxJKhIBeK8A1cABen1+Qk3UrvgT6e5eJe3DAEu8eaXCJhI3W6ci277a1BejH:a9Pj2JmDoo3niADlRGtkyIMR0OYQ
TLSH
T1FC238CF783B5862E9A11A5F09B18AF1FCF181529035C396689D4BF07D3E2872E152B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 48KB
SHA256 0e7414b780e8a1023781ea6fa2553f5d20c0ccfa3c8a964f9c2e9430644a6800
MD5 ffc91a87d496e46a4e9d5de6d7fd76bc
SHA1 3d54e3346e3238a02e16e0209e10faee5b18b3e6
SHA512 a2d8604a2dc3d392c0ecb214a17cb34bbcf6d5a7d773eccf165cc338d7e6add1ee783a04c60976349365e6e45e37c16834e4a04df84ddb5d96f09cbd715f6099
SSDEEP 384:DWOStxJKhIBeK8A1cABen1pQk3UrvgT6e5eJe3DAEu8eaXCJhI3W6ci277a1Bejj:a94j2JmDoo3nZADl9WOkyIMR0Orn
TLSH
T171238CF783B5862E9A11A5F09B18AF1FCF181529035C387689D4BE17D3E2872E152B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 5d1c631de6ec04ef6fbaee72509632b5da6025d85659f329bc6ec54e874381eb
MD5 d6dd3c9152b549be2d4bab5023c0dfef
SHA1 203853424059b2286d0f24d4c14e2a0d6f5f4101
SHA512 d457ac98afc95576fdc1f0c84289761e602cfae01d754197317b8ce654ff88dba3e001b04a20c45ecb1d322f0a229b8519e706d1850f1b85af0a67cd3cbda49f
TLSH
T179D02263138071BBA5BD3ED1486AEC8FC32A00684852EED823D09CDA053547C050F282
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 fca31b09151405ef1a9c0beb11eb559de343ad2a0e77f757656d1a2dc3492e55
MD5 9e580195534e07684a89ca9fc12f9a37
SHA1 b55afdfdd2a785b873686e2e5346daadbe4e964f
SHA512 649b695e96fde3fe9c6146f2cb3e5a9705e9f3856fe99016c3d0e5ee7a3ba0d1156e45abfcf19fe1fb0d43c8c3a4340de38fff9cff9061fee201012b35d27a2d
TLSH
T19CD0235312417177959D7D96546DEC4EC325106409029DDC25D05DDD057147C051B042
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 82b8974e78476284a90e330bb0e96cf02212dc4ef777db71e6eef05ba729bc6d
MD5 f8e881595171af55a250748acaaa2dd7
SHA1 e1b1c51eb8d06608e7e17f7b5b548d6a28081906
SHA512 46140d80253397c06e3410387126c93a72cd57d8c6c9d74110de760823b4c51e6490c7ef14bc75ec1367248de5047b7f381c6c6bc5091072fb0643c988549a2e
TLSH
T165D0222316C071BAA59E7E96886AEC8FC73600680802ADDE32D05CDA29314BC092B082
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59017d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59017d.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ba9c6e7d679625278cfb37ff3193c4946bb5fafc9e817b4e46a31598955b58b9
MD5 c4353b5b68f5cd733f26086a2ec39144
SHA1 70f9bf987bb36d4cc444b476e24b598495dcbc60
SHA512 80430ef15f643a5578c031154b67839d93f06a0094aefa8589b59a48fafa65abb1e906fae5fa8925b7725788dc8cbbf108ca90a300540c70a34360f63a699cfc
SSDEEP 192:sxZwRlk7/f7sKEEuEdpxyXHW6+WNKym/YzOrpIgrJ:sxZwk7/f7sKEMiHba/v9
TLSH
T1B322B7526E38E93B8CC7D219BA15BF13E2F95032A1951E58E6FC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 1dfdedd40847b74fea7274b75d2e77ace5668f83bd969ad38e0c4c7cb01c1ec4
MD5 85f2a88d84070a5937403efe696bb8e6
SHA1 2b0f0a647e830d4f6a0589706936c1d4ba82420f
SHA512 1c6509a0bba25a6cf43fd74e7c1d0a855fccce1aebd6a0c4f4ad7adcb0312b138bc9e384a3814cf515c66719b8979c8329fc537988db637d4bb36cc0547027bf
SSDEEP 192:sxZwRl0cB17/f7suev/6bYadpmER04RZXHW6+WN4f6tuLHuAFym/YzJ3tpIg51vW:sxZw0m17/f7suenLqBTHb/an9/w3Gp
TLSH
T1BF72C4525920D97B8CC7C559BE35BF52E6F900238D914EACA6FCD91C04EB6EE2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1260eef7885385a353e19f70c66a2d132b66f0e994676531150a08f35d23e791
MD5 01abb760713cc5736f6296f43357a6aa
SHA1 b99575654647213f141fbe13c3cc6c3bb575df02
SHA512 9be6a9918b0dfb4424683c677f63da09f635fbbc15331489f8b05c61af789434984085a69070361db3cadd55b735133d81af43b7a16cf5ba045314769422e499
SSDEEP 192:sxZwRlW2cB17/f7suEvkdpmZR04RZXHW6+WN4f6tuLHuAFym/YzeFtpIg5nvG4G:sxZwW2m17/f7suEcETHb/an9/hNGp
TLSH
T18C62C7935A24D97BCCC6C619BE35BF52E6F500228D914D9CAAFCD91C04AB6FD2207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 4f701ce6cdb33a833614a9352a080e2683e37f64a65884c9274da2b5c959aaad
MD5 e8ce15a191364574b6105150b0c3e2d9
SHA1 3d6699d350d5067c1a89a18b485d1cf7aa2ce9b7
SHA512 67a8059755604b8e6dd34a61a07c889e4bb44ca4696905e53d3b66b45de651cf03dcd3ef8ec5d797013978189bb5be1531847d7fcac032453793576e11156900
SSDEEP 384:sxZ8nDBpm47/f7sueA4rFHb5LdpVkDh9/6K/Vp:suDBpm47/fVeNFHb5LdM/xVp
TLSH
T14992C5525520D97BCCD7D519BD35BF62E6B910228D914EACAAFCDA1C00EB6FE2203C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 0d0ec829bae236c10d8083a0842054abdb70ccdd5fb566f83a91c5cd6105aa85
MD5 8257c6d60884c4e46b591c55398bcd40
SHA1 c02db2d6ee90efdb53344c1048d810c74604b2a9
SHA512 e2ff55a06d997bd45f849bd74eb2f1180725023d18fbec1302883fc77e3fa629c95dbf01fbc750ce0798ca902df00ea22dd3b8e5d5c458c01a38ca939e6d17ea
SSDEEP 768:suqpm47/fVb4Mnc7WeT+l5rkHb5Ldr/ySVp:wpm4RcMmW7tw5Ldr/dp
TLSH
T149F2F9429520C87BCAC39D19AD3D7E33E6AC50535A95CEEE5AE8CE1C009E1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 a74b531a51e1059fa6bde1bfaebec8d41d2066ddaa87ee1675006ddb730a66a8
MD5 030f1d7278c779a608e987b6a27666f8
SHA1 e933839866beb461650d247a6b4d13875fb7b2b6
SHA512 270ba0a94fd9d975b392a667e8758fe11c64f2b14774eff29b37996ad72cb37c4ad2cc0d0bc982b470449d82e5324676c1c7423e6037b772409242397b1a0a18
SSDEEP 768:sumpm47/fVb4Mnc7WeT+l5rkHb5LdZ/HSVp:8pm4RcMmW7tw5LdZ/cp
TLSH
T1BFF2F9429520C87BCAC39D19A93D7F33E6AC50525A95CEEE5AECCE1C009E1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 1a27be048e9c0e6ac5ee97a9d052c3b89549c028a8fb1f7d5c20f5a7b0229739
MD5 2e80626d05c7d3f051aa8e076cbeeca6
SHA1 720166d3ffb96873c5d3fdac7de3e9d513131087
SHA512 ef8adc11ec8784d392f67eab5413937c53f09b6e9aa0adf1e433bc8792ccad311a939db55afe2b0a0eba70b7c922485a346c0fd2b4d814507d0c25cdcc2681e5
SSDEEP 384:sxZwpm17/f7sueULqPFHbHLdJdnjh9/v3Gp:sIpm17/fVeUOFHbHLd7/up
TLSH
T1C082A4525924D97BCCC6D519BD34BF52E6F910228D914EACAAFCD91C04EB6EE2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 3950e3d11a45090cee940618775fe055832884bf793564e6cee0e4398a62a7f4
MD5 49249e10339d9c34b9960bcecdc38db5
SHA1 ece606785f3946c8f01f57982bf096bcf808173b
SHA512 2bfbd5b0e9944e575ea009131e1288f38d9d7ae9859946e8509cce0f7d737725b0b8c749bdf79d6a39b746929bf386d5d42b47d6b1b3434f9bd1003e9531de1c
SSDEEP 384:sxZ8nhpm47/f7sueV4srkHb5LdpVkDh9/6Y4/Vp:suhpm47/fVe5rkHb5LdM/dSVp
TLSH
T1F192C5535520D97BC8D7D519BD35BF62E6B910228D914EACAAFCDA1C00EB6FE2203C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 37KB
SHA256 b8c347f6ca98be1c2ff5ecf645c9dc8d663219cdb167b5feae786ebaa67cb46b
MD5 6e7baf5d4f26057add0302c2ec5d2d42
SHA1 aa3ed02060c8d8b07ef12d33b8cbec8548352309
SHA512 c698fd5763baed9f2188d5678e9017d97ed2e1025ef45948eaf8af9c61d45f46db9bbb037d7928e32c18fd010b0f084cc1a69f32376131851adcedeac3660fdd
SSDEEP 768:sulpm47/fVb4Mnc7WeT+p5LmHboLdO/sfU0Yp:Xpm4RcMmWHRioLdO/UUVp
TLSH
T16C03D8429520C86BCAC35D19AD3D7F36EAAC10534E85CEEE5AE8D91C009E1FD6F17863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 b9fd8fb413e7b2b7d46e88d10506f0168c6d2e4411a811851c29bb422df498d3
MD5 c1276e12dc1ec0f51d4c78229ffff8e1
SHA1 73e9f8b5145e242835cc4992feb9d7c46ab45714
SHA512 68e84faba9f566fc2a44f5db54b03b76c42f26ba54ad683d5fe8ab86f6604b0b9e0186b341ed7d1a9fa0adb7e641481e80045fda6174b17ee64791246ca34ff4
SSDEEP 384:sxZw0m17/f7suetLqPFHbHLanjh9/63Gp:sI0m17/fVetOFHbHLo/Dp
TLSH
T18C82B4525924D97BCCC6C559BE34BF52E6F910228D914EACAAFCD91C04EB6FE2202C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 67465a3e4e09a1163d0e778cefadf5efffdd62424a786834cbfeaeaac53446fe
MD5 4d318047e7f3feb32b285fc6b7ff389c
SHA1 f9e1bf73a17503448bd9f3ad720080216880ae75
SHA512 3569079c0174e77c09baeb192e380145bca17e24b4edd40ce070c26e64fdd7ea7ef8130a191b083c5b2b8940edd2920047a48a10753daeec2d8661d59d2c41b3
SSDEEP 384:sxZw0m17/f7sueULqPFHbHLanjh9/k3Gp:sI0m17/fVeUOFHbHLo/tp
TLSH
T1BC82B4525924D97BCCC6D519BE34BF52E6F910228D914EACAAFCD91C04EB6EE2203C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9d7a2fd877837b38bff936f25da568c0cb2096ed301b9fe52490a5718d4e151e
MD5 65930818992c8803ac30329521e082c4
SHA1 f57f510c526c15f65c20ea7ef60b00e3d5ce2cf8
SHA512 00152dc67afceeaa56848af078189cc619a636dbc7b00755ea14b83f07dd7b9c48eb3db9fb465397db9af1d047063bac6c9767945989859007b9e2d75a37c146
SSDEEP 768:kOk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBjroylYm:kOk7u70WvqiEau1jai5LA3BQtm
TLSH
T185C2E93B740CCB7E4F801E9DAC5A6F977E9802C7A6948D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 f5da771d803f03bf2d627d26e994a7765aca54b332e6eb99d8ab4b6b95a9996a
MD5 1d7610b77fed7a062f59f2eaf0491536
SHA1 ba872340e01e01e6dfe29c677be71edf4a32406c
SHA512 7070adde489a86990d2ae8de87fde783395dd3574fbae18e8970ec49e359d065b60a77957324bf7f0cb6b214c5ed57e1a0d2d6a3283e97721c262d7c85fb9388
TLSH
T17D51FC0D4C83171ED9BC157314F610003B7974EC62C85713F5ACA434BDC33292DA8368
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 504B
SHA256 bebad59b604f3b35221b03eeac4de60ddf8370caa3b98cbdc5254f2b3cc46957
MD5 ba46d418a1e65d6a172b3124924fc114
SHA1 a2b6124a715c9ff02bc3f1b45f234c69ae1e5d4f
SHA512 2c18fe8c94cca496fecb590344d57ffb60b53d7049a1bde39c91453f0b75b50e117879c97597797b5db0239c9b33e0df2c3f88ba4cd528f63c105ff794dce178
TLSH
T172F068594F915426DBA44AF325F714A273B1CDEDB232D85B493C6C6E3C6A38C612B1C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 77d6a742dfe8ad247d1c1182ee9a95b0c74d58c2ee7eacf64ed5c96073fad5e1
MD5 d2e296b66b80eb44a43162ee3357ec7b
SHA1 aebd42e045e3e1dd2a8a12a28a0f89fc9e566192
SHA512 aba5f8789644f404c721845629fa0579c561c0f7cad6dd95e528e6e3cef24c87cb82a4fb0fb866177c14f8b64dcdcb98da6ee67a406e6c82e7fc5fda1ae8b962
TLSH
T1A151E94D8C830B5DE9AC257314FA10103B79B4FC71C84B13B5ACA834BEC332929A8668
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e2f8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe58e2f8.TMP
Size 504B
SHA256 fd383f6299194caa6e22a140ba39a512152a1ed863b28aedccbc8575e740f262
MD5 c33cb00f1f95ba46bad6321f1248f193
SHA1 9ea9e1409fcf464d836dde4ecf6cb5d1299db869
SHA512 f1971721fd8d53ac28a0efec8198ce8e98573f79a2cd260dab2b86d0bbb7ddb0e68e97d575ff241aef3167ea4fb7fbe8220892604927c57ee081805ea13a1d67
TLSH
T149F0C08987A20407EA100AB711D544A6B671CD207171EC822039B82E2CB57C8A5530CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d841de8d-c56b-44d4-bb04-c5df20c573ba\index-dir\the-real-index
Size 72B
SHA256 ec08382ae49d2993721adfd70c414ba5500652fb0f1c16d5d932d71fe5e5dc33
MD5 e07ec886a7684f7cf3313fcf2608e9be
SHA1 72575b4d5aa1e1e74d57034f9e3d71351f1bc08a
SHA512 396bc84a7d3c8a308cf49b7b92f7a6d58f22c9e3de72890e41a4aae614633f06ff5c752dc12531d351b095d61f61e1fa244db0a67db582d1e66a63b17f6ba0c9
TLSH
T11EA0023641984649D8110FFC914201A127767C1D4102830F65D10AA988961684D15684
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 e52c9bab9b68bcbf3e6634475e725fe9e65cc4003ef9220e0e18995490355a07
MD5 7972e699a77f5a7cfb9af15b485a1287
SHA1 e6408949fd5760a115f1f0b4de4f82395d2968b3
SHA512 d0957be59b4b5552868f5c5cb95b71fb342deab8c4c047362a601e8e74ff79f8fc60512110d972e0a65d91ac92a293dbbd54f11c24b7b419045e389b1e4da0ad
TLSH
T16CA00413CFC30007D11311F15D5307411F01CDF075105307D4D1004CCC7044C4D4104C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 96B
SHA256 a700dc0d2ebafa96a62435ca499d1bb2a88a941bfa3fee2676c49eb25095ceb0
MD5 0b8d1fa3b3ad1f79198dc9bd0754531f
SHA1 fc783a1f8eaa8c62cef0dc55bd011958e2eefe9a
SHA512 ff17524500cb5668d23f544eae471b2dbeb438a8fc97c702524fc2c5c621a98748d412c6fed420780b3c2a8b7234925ed2e4afd3ac4998be660709dae2d12ba0
TLSH
T163B0112080808202C08203F022E2AA823A2828800302030AA2E0A2CAC820AFAA2C020C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 feabe9571adececc4f0dbecaf376b78f28bac04f6483d239a36d229bdcb49ef0
MD5 e0bd0aed40c5f2e161040420dff49397
SHA1 1a1688139ea7cd1851d99024fd87069373ebe628
SHA512 dafd8d4aa60c4e0887a0528f88c364ac1ad3bee7560a157c55a5c58a0ca7be53dcd924cf7621f156846303a6c69e0090977e5ecda26bc17d50fa92f64cb94181
TLSH
T1F7A0021442F12011C193D7F027D2924622316910B303231DD1968EC5CC61649866625C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f879328e-9d3d-469a-a481-a5fdf68d95eb\index-dir\the-real-index
Size 72B
SHA256 aaadc95ddb8c5cc866ccbb034d63e9aaf603208a1281888a356d4ba1c007f6dc
MD5 a715fa854d669b17ca943033ee62ca83
SHA1 d1eba05e975db52fe3f59405076acdf8ae0878d9
SHA512 e64bef3c7132a01f7d19dd815cf0a68541c8da2299f1098fc8d19c6dee148425696309c14c9394891ee66e949cc33b720a2f6425091a85751cc6ac536142989f
TLSH
T1A1A002705F9D9453C818477598410380337498D95115360651B8146CCCDA17645814A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5fd2f9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f879328e-9d3d-469a-a481-a5fdf68d95eb\index-dir\the-real-index~RFe5fd2f9.TMP
Size 48B
SHA256 72bdac133ba33a34a69da178da41a4d00e9fb564e8654950b561a801d8747063
MD5 f0978d0501b48201d9406b8564222819
SHA1 52a1cce859c737cdc7196c5c0182c0dbf18f300f
SHA512 a2f452308d377c4237cda8de1efb59e7e2fff923feb1e14a4c3f2db9e0a34f1c2e04ccab7eff4c69efd627c1878c50cc248e084ccc4464c83b1722aff20504cb
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 a0b2e235ce7bf976c778c9c4eaab42074a2518211bea20e7f33f8116bb6d1a24
MD5 89a73aa9c22d7f6b53ff54509d991d13
SHA1 9c78460a8bf8203d383f4c47667f348d53769161
SHA512 de16f2d12f4ad27e23af03346232d6f566696278fefb8b54a2962c498903760a22366045a9e0a91aec666fd3b9048f6db3f7aec8f08905cfd5d40054ba0567d5
TLSH
T171F027BB2EFB1824BCAFD3D5347154A045493C189541EC4E30677197A0F2715294EC62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 0f087ca73627867688a5168446b887c35fe4ade1f69af0ea9a01892b524478cb
MD5 e6bf2164471c4a5f73bb6033e8a11f4a
SHA1 fba64f1d72cd25e1b8b740a9cfe7837dbd2c76a3
SHA512 7ebd6f94997892e695d85aefac5adb7a6b9dddcd418f9718e28a97c74cf6f52d8049c45d6504d8862f2a53a70c79c481888c7b31ada629045d59b13d71742995
TLSH
T138F027BB2EFB1814BCAFD3D5347154A1824D38589550FC4F3127769B60F2759244EC62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 17d2ea5b8f43260d9f2ff83bcbfbf12c1f868127e9e0bef5587b0fa7f58eb3ab
MD5 db3faaef7c08b4c3fedc28bc40e897ae
SHA1 1335443af46054ed3d280ef8ecdf2b2de24696a7
SHA512 5164164149cb1eae2ef9b3787ef1b93c058efaf567512925a9fc00da6546f82f339acdab1d946bdb90b4a06b8a57e1021b535ff687e32a46a917fdd17ca91ffb
TLSH
T166E0D8BB2EFB1D24AC6F97D538B165A081863D689914EC4E3167A29770F2751280AC31
MD5 SHA1 SHA512 TLSH

Submit Download

67a473248953641b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
Size 127KB
SHA256 9b065e1f5d7dc5a2801396912f53fd9900a21f72d0c0076866633f9f928fb861
MD5 c81ff9cd88d648cc9589137ceb2d052f
SHA1 b9b0e22bb811fd56d5127359c3379c09b897d746
SHA512 f30a277eaa01058bc69797eaf63af5cbcb5ffeba3092bc46625da9563870f8321daba3e2476177e9d65b020ab0714bd93a311873838fd414b2da380f7917eb7b
SSDEEP 3072:T9w59B4xPCx1C4Ke3ThL/A25/Ax0gL/tL/vL/dL/yL/df2gfU:T9wtzhL/jFAx0gL/tL/vL/dL/yL/dzc
TLSH
T1AED3AA32769D509B0E8ABAB45056B50392BD7467B8449038F244A7FC25DBFB013FBEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67a473248953641b_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_1
Size 222KB
SHA256 3cc73f25729ebe7309d20de28220024f15138872be206967aa593363592568f5
MD5 c7e68b700539436a1e33356a5fca832f
SHA1 d2e6c482adc7bf913ed3fa18db5f553eb1ff3101
SHA512 b09fc707267100a7e86c4ba23aa91e82fb487f472ad6048217ee9c4711dba44071b7c3c22fb4d3565f1a80ac8df2909e87b788e08f4958d554359c12b23c295c
SSDEEP 6144:WLmfEjiWxMcjs7vFvfeK56+X1ddL1Bcf2KL/aEpZZbRigVd4X7t65V/YdvL/sL/8:EXihAL/hpl/YdvL/sL/fL/vL/EL/QU
TLSH
T140241A26236521EFCE1993B911639A1377B8400AFEC3D27DA5419334186FBF35ADBD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 3032b2f92c602d5fe7ea74317a3afaf99efdd7a7b989abc47a618b80532d7d3d
MD5 abed92d14bd9bcd13055e4cbe581f382
SHA1 238cb9e72742605d9cbc67d3fc61452d7d25f1c5
SHA512 b104c58e454130a18214aa587f8622f15de3d612c580e084afa948e0cccf37f23fe7251cf584a515a9d5a860135066f6ae06261f76dd2fbb4f65c59333d6086f
TLSH
T138B022A28E82C083C0280BF8C2B308EC323C2CF8030E320002FCB02EE032A2002CA082
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 0b3a7a7f3a63fc6ba59dc4c153daa4ff0ce37603f28055647cc722e22de81669
MD5 515cbd78ebbda43f27205ef44ff56a5c
SHA1 1f937b745c09545542e445d1b74f0dc51071ef47
SHA512 f06149e9295a0f601335ae2a20ed32c9fef504503fd65eee44283ca375cb0ca0727e71b8fc850f5e18c2e6bcb41b256f78c919c85a4cf01a3dc909834ac28932
TLSH
T152B01180CC288082C22002B8C8A208CC3C282828030A30200CFCA822C82CA0000C2008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595be2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595be2.TMP
Size 48B
SHA256 4a610e874b629835bcec27a08d229a81436b8c661d35f2fad85d517ce52bf9c6
MD5 f6c6c1eca559f2d7398b90a5b6b3bae1
SHA1 257cb54286bf854964cd0ffe2b0fe16cb74038c2
SHA512 d07c68ca81daee4b6e2c460426d216b954ccbb341d41f95c308d295580e28cdf611fdcd707da8df5f62867df5982e93440dc7cb0f8338b5abfb9cc9687b7aaf7
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 171020999ea861aaf9a6a087462981ccf4b3db64bffe24876f37526500154788
MD5 4c0a3ccc6c84869bd5bf981ae27dea04
SHA1 55166fd5bd38c30ef0c805426e65eb66bf1a5a85
SHA512 d2eedd766367327da17eea09e56d666ab4e7a068142219fb2d9984c4e30519420d9f77d2a231bdee54bef946ae79eca9f9924929dbf2c6251e62735d38db38f5
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTfJIdKiQoPyVvI5KYIMEEIfKx7:KIbCKcfJiKiQamvGKYIfEoKx7
TLSH
T158911192733B060138BE685897AA9A278F4331537419A46F7BB801B11F66F211EFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe598217.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe598217.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 744dc4bc9304ef8b15bb7fb9cfc575d48ed2cee9d87d9e01daea3dd4ce6509b3
MD5 05e3f3ce5a007130a84bb9e9d3d57b66
SHA1 8f7d1288a1b9f77f7489f04626ac33cf7bae55e6
SHA512 cd9a02b7acadc41a20fde7afe2a82f7326a7de3a3986440e7e9ba4d31f6de9535391c0136dd45690226d0888230a0534b8b5c86dcc85d0868ae11fa0806ffa03
SSDEEP 192:MqsNdFQ8vtztwBbw5QmiU1iHQnZaGBPKmx+FdG+Po5Z7pEimMSWN0rqQlxV17:3sNdF3mbeQQZOdWGimk2l/V
TLSH
T122423B75AC74FD3B5DE26646F88A36035FB8512BDAC82F54A6DC6B1C01DB3AC130780A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c087170e787643f0e326fe701e9fdd0fa22ab92d6e5758923f1b969acbf2c087
MD5 9c041fdb2462910b0a312fd46386a27c
SHA1 63a18276f6cf68758ee52be573c1a3d3157dd588
SHA512 4b8c8a470ddb3c7768ada0aa7e722227493b672045a90d1b75ecc34b0e3c2d6e2e1e2fc49cd626b150bb9aaa3875a97335f3d2d65d2c4ea91f938f54b3d2f774
SSDEEP 384:zZcIMsNdtTCmbK0QJ2OdWGimN2XK9Li6Uq58bhP+IGKBu5:rMAnQJ9oGiY2wLwfdBu5
TLSH
T170927EB05875BD771DE6A246F8463A038EF89137E7C46E80E5ED9B1D01EA2AC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f53da6df683efd73972970fe28576b957da49c918920cff7cedd6b6584dc68b1
MD5 b5417c347ee4b20eafc742f8ea8dbb28
SHA1 3d9b5ab5f40d92fc3e0a7c54ca18f3c83e3841e2
SHA512 fcf54aae3c0d2bca2154b96eb15c09f8b4be92c9a439ffee42f89f8c5f0bb97d9f9fbcb3853a2835c1fde1c591bb0b73ec27977d5a4db9aabb05603498d2e04e
SSDEEP 192:MON364BAQmiUyb1NW5GBPKmx+FdG+Po5Z4aDyZ6U6:MON36eAoTWldWFc6U6
TLSH
T19202D735AC796C7B9EB2AE45F4863B175FD8113BE6812B44EAE85B0C01D735C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 105f2d1808f15025eafba701cb7f14f106ba400887b351485506da9554661982
MD5 055a5d824cdca15c75e8dac42cae301a
SHA1 77eb3858922d2d4c9379903f8d283cbb733879e5
SHA512 99a9f61564b1d6614143d095243c550f6bbe8bb9e7ca3fe2eef8fe772706b85e12055d0d856514a287b2fd1f9b0133c887c16a24be049464beabbc4487d0e790
SSDEEP 384:yZcIMsNdETCmbKfQJ2OdWGimN2XK9Li6Uq58bhP+IGKBu5:AMncQJ9oGiY2wLwfdBu5
TLSH
T1A2927EB05875BD771DE6A146F84636078EF8913BD7C46E80E5ED9B1D01EE2AC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0e9b4075634c9e63530d3dbd217f71890345351392d2c9c388dca651c4bac0b9
MD5 4d662eb34e55d2955cb9f0ada9f574c0
SHA1 97701cc3abaecdc3c1403d2e98d9d9b7bd3a178f
SHA512 3291b700ec757be8be0aac16efca58ff48118f0d7e1265b90bfd0bd0a43535994517bf2b303eeef4d887fe6bc1bbfdd5df4c8e1a5302429621bd70c26480d338
SSDEEP 192:7ONA64BgQmiUyNND5GBPKmx+FdG+Po5Z7pEimMuWw0rqQU6:7ONA6egGDldWGimT2U6
TLSH
T1CE120A71A878FC7B5EA26545F48636035EA8513BEBC56F54E6EC6B1C01EF3AC2307806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 bbc73eb947d487c5fa6353b66256b64beaf04b9bb6a117e5ba8eaa1e253e3513
MD5 ceae9195a6af984eb215eb6d50d4d38e
SHA1 53150bd0c20337637d4fb0fa68e0cda3f9d28cd9
SHA512 29c09f879e371d9554a15886c675fa2e92fb927d132c9fc07a5f99f69812d389b6a71727f9fad394be7cf1123207d1b6a9f7cb2746ead242306f654a7ad45962
SSDEEP 384:qiFiZcIbysNn8TUNTUlIlETCmbKfQJ2OdWGime2XK9Li6Uq58bhP+IGKBu5:hFQOCwgOcQJ9oGiB2wLwfdBu5
TLSH
T109A27D724CA4E97B6EE6A745F84A36038EF84177D6C4AA90E7DD9B0D01EB1EC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 0627540be8060a56fae124fe7480d0dca8fe4964a071969ac193ddef175e3a5b
MD5 c336e7375b8a288cdd357a6d26b486c3
SHA1 f4ee369634ae28884515ed027551c7851aab206c
SHA512 2269a5e7a43709de106a79d8330ae036935afb3144b953a8101a264cb0830c858667e470f0b1fac16fa1ab61521c1222b378a12e4868fda60fd6abde5d2afb5f
SSDEEP 384:qiFPZcIbYsNZ8TUNTUlIRATPmbtAQJ2OdWGimY12XK9Li6Uq58bhP+IGKBu5:hFH0wwg1+QJ9oGiJ12wLwfdBu5
TLSH
T178D23AF148E7A837D9AE5743AB7D2E038EBCC127B5845950B3D85A0CCD9A1BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3fe174a96c2cd4f8dccce0ee064f5aa9b9b3ddf6ef065e35dd37f0ba7c3294d9
MD5 e37e20dcd5abb10dcf3396f4a3cabe01
SHA1 c46a3c7bfc7ce1a1044787bf065556f775910050
SHA512 9af9c3f57a15fa990f6bb7af1b641bae15f19c33f909c8c141fdafb63eb916e3750133167f72880db433462b42f09943687d01f2d3fb259a59667f5eaad49ccc
TLSH
T135E00103D76040EEC435473180831B30ABE3903106721A9A5F3106A91C233012F60BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 522493b69686328854479b7a597656104ba38c920a9c2448dd4d44cb6351ca30
MD5 95872ed16795a2ce79d6a388fb730a19
SHA1 38b3fab40b402149eb715bb60eade9efbeae99ca
SHA512 7c2cb5598f2a70fbb02e96b54ad437dae435ab5d04e13efbf69a4b105cb729c25967d81ec147be2ff22f2a58fcf652be51d138b677d2cbe07a80da53d9cc6e30
TLSH
T114E00103D76040EDC034433040031B308AC3803104610A9A5F3101981C223012F60A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 72005580c3d5714d51eb027776767f17ed1f8678b38d383ba340a4196bbf117b
MD5 f165498b4bba2c530c878d611069085d
SHA1 17296897a47ce688f31115febd2c70ec4b2ea6f3
SHA512 1ac4a8cfc445b7c28b5d8627d97e9ae8d4693867602e3f8172d4ede1a9be512e19ceaeeea2ec5ab419e483967ebc774af509a7881243cf72d7a50d4d5db8db10
TLSH
T18AE00983976048EFC839473280831B30AFA3A03106A62B9A6F354AAD5C367053F607C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a4500a96e3b88965b4b780f336d50571de85d81a8437a8e01129b38cba8f4f05
MD5 cf0b4049d226b8c7098158e521eea689
SHA1 8f3dda0ecdb48bb24f56268a9ca18919d1607344
SHA512 8bc8edd4b7abaed209465daefe3e40db06b9e1ac58cf9a0693891a752438c1376f05255fd2b9b398281ae700f3a004fd7859dc1c75ce8fe451d6373f606cc65d
TLSH
T1C4E00183875144EBC839073280930B307FA3E07502E61B8B1F3405AC1C323103F60BC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1f9733dba886681e3b76cd79dbfb827f61dd1d81003dcbffa9d3ba9f7d24fc4f
MD5 407f709d3116600c72299c0e0d9f1638
SHA1 e50571d7972545c04aeb12d53bfc043ff7724a79
SHA512 28dc1125b62152dd7fb9bea1ecf0e189872c5bb95fa00315b55452fd036ff959ac97c8570881e8438c6c025b413ed709c0de3ab4706ac7436b3f084acb346b45
TLSH
T13BE0EC83879045EBC82A073281930B30ABA3E0B506F61B4B1F3449BC6C727143E64BD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 84a91907ef3604bfc144b04fe650fcdea0261057ca29e4ed31358920886527cf
MD5 64ad30afc011b56b8ebb20d480c5c912
SHA1 467d726694a3cea656f47f1b359df7b28e0ebdbf
SHA512 3e21df16f6730a11dbe324d6a6c092dc91af72adca6d18208640cd70f17b16259c6b9919d37eb6db2716e3479bcff02cfcba32b9083b79fd83794d0c2a76076b
TLSH
T123E0EA43C75445EBD86A073181930B306BA3E07106B61B4B1F2449B95C767507E64BD5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d00749c31455640c4585e4950972c11ceac553ddfa803fbecc9e091d2f4f6b0c
MD5 972b71635bcdb4cda399fc268f4873e4
SHA1 228e404d3b5efd7bd2bf8419caa3c0264dbc9524
SHA512 0c499e833cfb8ad8dfff4670399dfe99b0a9508fcc055a0c2acce89cc88d39f985519c9ac3db6b19b704c3e97b097b21acc1ff2f6d49a5f8296485a9f460f9f1
TLSH
T1B9E00843975044EFC435473284931B306FA3A07506A61B9A6F3555AD5C367453F607D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7b8d54835cbe77e95fd8ebdd616fad81597778349499a8994ab90b6a82616348
MD5 2dd9dd11f675856efb3663c08f123c4e
SHA1 6469bafbe8e2e17d7717e482f92007d2823acc14
SHA512 c56fe0172e9594c3b688bf22979946e21f0d0f42c8655d661161802e9d10fb27bba6af610164bc4de96223b26a1c5b7c8583a8728a39e431aca60183528ad75a
TLSH
T128E00143975044EFC439473284931B307EA3A07506A61B9A6F3555AD5C367453F607D1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9067a819eb573d32bce2278e26cc2b54ec5b2b1657508133f2ffc705e9df9c50
MD5 bfa589968b8f0632c11616522c852cc3
SHA1 c397e6539bc7f2cbc77a6c049b79c293d383d98f
SHA512 59727713807c0e5b211a11d6a103f7b4cca54a1d165e434482f0b8b965e023593ece1fa0b043261aeb4521bd057c784b9159f7b15517a0bc89992a953eded0b6
TLSH
T108E00143875144EFC438033280930B307EA3E07502A61B8B2F3401AC1C323003F60BC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 94e233c2fd0b17b21a51f5ea88f74336c3b7908ccfe341fb461a15f6ff8730dc
MD5 0184edd47c3c744bc6e7e352a06dafea
SHA1 49a3ce7bf15f2d78a95631803f4431d31295aad2
SHA512 c39d7779df6ba74c69e22c8da4a6f1ae359b779ca08870baf9e53522cbf933008933ee7386ad467942d42652bbe9a418ced13857caa7f1ba8b384ab4885899d9
TLSH
T19DE00943976040EFC839473280831B30ABE3903106A21A9A6F2146A91C263012F60BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d79752e56530165ee750d53753d7d2190aef62639835fc338dada9821cc49c89
MD5 08dd52266184be106fb8302b90644d04
SHA1 4e2c13e743c8f4a82760393e7962d0080cc1d410
SHA512 b847d2f9f52817d53c590416563454f2b5d5ea0cf6f73b3a7fc85f55cfc9941e70bf5f51c6ab8e9f4f821afcb6d586121f0cda2c5a66dd08b0036cba2f0d7041
TLSH
T1C0E0CA43C34004EBC82A033180A30B30ABA3E07003B30B0B0F2009B92C72700BE20B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58f344.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58f344.TMP
Size 392B
SHA256 edb64cb02fb45cdd3debc755b86f86b552828bc81820e9d450a9ab0254bcdaa8
MD5 4a2c1a6e94a79fc8530f166c77635607
SHA1 ec486f26802e495517475c3477924b6a43274f3a
SHA512 2dc3e48e1606884755dd955dec932ffe32846872a7dc35af6f3e183c2279ff79a5da5dfbf28145756910fd3e83ede94e8fca10b4be6ab68ca64273a5c4b50867
MD5 SHA1 SHA512

Submit Download

7405baab-63ef-46b7-b7de-5d9c639375fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7405baab-63ef-46b7-b7de-5d9c639375fe.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download