hxxp://malware[.]exe

Analysis

user interaction
yes
max time kernel
1788s
max time network
1801s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://malware.exe
Sample260810-gzcv2axtfz

Score

6^/10

discovery persistence ransomware

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 15 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2687	camo.githubusercontent.com
2688	camo.githubusercontent.com
227	camo.githubusercontent.com
247	raw.githubusercontent.com
2671	raw.githubusercontent.com
2672	raw.githubusercontent.com
2875	camo.githubusercontent.com
243	raw.githubusercontent.com
248	raw.githubusercontent.com
228	camo.githubusercontent.com
244	raw.githubusercontent.com
246	raw.githubusercontent.com
2673	raw.githubusercontent.com
229	camo.githubusercontent.com
245	raw.githubusercontent.com

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\Dictionaries\en-US-10-1.bdic	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2932	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308160890912889"	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 010000000200000000000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 010000000300000005000000040000000200000000000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Downloads"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 020000000100000000000000ffffffff	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Downloads"	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5776	msedge.exe
5776	msedge.exe
5904	sdiagnhost.exe
5904	sdiagnhost.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
8344	msdt.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5904	sdiagnhost.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe
3816	msedge.exe

Suspicious use of SetWindowsHookEx 11 IoCs

pid	Process
4452	msedge.exe
6960	msedge.exe
7844	msedge.exe
7924	msedge.exe
8828	msedge.exe
8828	msedge.exe
8828	msedge.exe
8996	msedge.exe
9872	msedge.exe
2436	msedge.exe
5788	taskmgr.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3816 wrote to memory of 4688	3816	msedge.exe	88
PID 3816 wrote to memory of 4344	3816	msedge.exe	89
PID 3816 wrote to memory of 2932	3816	msedge.exe	90
PID 3816 wrote to memory of 4344	3816	msedge.exe	89
PID 3816 wrote to memory of 4344	3816	msedge.exe	89
PID 3816 wrote to memory of 4636	3816	msedge.exe	91
PID 3816 wrote to memory of 4636	3816	msedge.exe	91
PID 3816 wrote to memory of 2020	3816	msedge.exe	94
PID 3816 wrote to memory of 6128	3816	msedge.exe	93
PID 3816 wrote to memory of 2020	3816	msedge.exe	94
PID 3816 wrote to memory of 2020	3816	msedge.exe	94
PID 3816 wrote to memory of 6128	3816	msedge.exe	93
PID 3816 wrote to memory of 6128	3816	msedge.exe	93
PID 3816 wrote to memory of 5404	3816	msedge.exe	95
PID 3816 wrote to memory of 5404	3816	msedge.exe	95
PID 3816 wrote to memory of 5404	3816	msedge.exe	95
PID 3816 wrote to memory of 2436	3816	msedge.exe	96
PID 3816 wrote to memory of 2436	3816	msedge.exe	96
PID 3816 wrote to memory of 2436	3816	msedge.exe	96
PID 3816 wrote to memory of 3608	3816	msedge.exe	97
PID 3816 wrote to memory of 3608	3816	msedge.exe	97
PID 3816 wrote to memory of 3608	3816	msedge.exe	97
PID 3816 wrote to memory of 4924	3816	msedge.exe	99
PID 3816 wrote to memory of 4924	3816	msedge.exe	99
PID 3816 wrote to memory of 4924	3816	msedge.exe	99
PID 3816 wrote to memory of 244	3816	msedge.exe	101
PID 3816 wrote to memory of 5808	3816	msedge.exe	103
PID 3816 wrote to memory of 1192	3816	msedge.exe	102
PID 3816 wrote to memory of 5808	3816	msedge.exe	103
PID 3816 wrote to memory of 1192	3816	msedge.exe	102
PID 3816 wrote to memory of 4152	3816	msedge.exe	106
PID 3816 wrote to memory of 4152	3816	msedge.exe	106
PID 3816 wrote to memory of 4152	3816	msedge.exe	106
PID 3816 wrote to memory of 4208	3816	msedge.exe	108
PID 3816 wrote to memory of 2844	3816	msedge.exe	109
PID 3816 wrote to memory of 5844	3816	msedge.exe	110
PID 3816 wrote to memory of 3144	3816	msedge.exe	111
PID 3816 wrote to memory of 3144	3816	msedge.exe	111
PID 3816 wrote to memory of 3144	3816	msedge.exe	111
PID 3816 wrote to memory of 5496	3816	msedge.exe	112
PID 3816 wrote to memory of 5496	3816	msedge.exe	112
PID 3816 wrote to memory of 5496	3816	msedge.exe	112
PID 3816 wrote to memory of 484	3816	msedge.exe	113
PID 3816 wrote to memory of 484	3816	msedge.exe	113
PID 3816 wrote to memory of 3644	3816	msedge.exe	114
PID 3816 wrote to memory of 3644	3816	msedge.exe	114
PID 3816 wrote to memory of 3644	3816	msedge.exe	114
PID 3816 wrote to memory of 4168	3816	msedge.exe	115
PID 3816 wrote to memory of 4168	3816	msedge.exe	115
PID 3816 wrote to memory of 2296	3816	msedge.exe	117
PID 3816 wrote to memory of 2296	3816	msedge.exe	117
PID 3816 wrote to memory of 2296	3816	msedge.exe	117
PID 3816 wrote to memory of 5796	3816	msedge.exe	118
PID 3816 wrote to memory of 5796	3816	msedge.exe	118
PID 3816 wrote to memory of 5796	3816	msedge.exe	118
PID 3816 wrote to memory of 3576	3816	msedge.exe	119
PID 3816 wrote to memory of 3576	3816	msedge.exe	119
PID 3816 wrote to memory of 3956	3816	msedge.exe	120
PID 3816 wrote to memory of 3956	3816	msedge.exe	120
PID 3816 wrote to memory of 3956	3816	msedge.exe	120
PID 3816 wrote to memory of 2552	3816	msedge.exe	121
PID 3816 wrote to memory of 2552	3816	msedge.exe	121
PID 3816 wrote to memory of 2552	3816	msedge.exe	121
PID 3816 wrote to memory of 5776	3816	msedge.exe	122

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://malware.exe
1⤵
- Drops file in Program Files directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffcbda6c188,0x7ffcbda6c194,0x7ffcbda6c1a0
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,11287638605437885283,13658318317890209905,262144 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,3586424799063414393,17832597792557063686,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,4640439325689564013,5894111614704127963,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:13
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,18351082288572254848,8971811980978131299,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,4877900035329686415,6007488466648370845,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,10487088797433166277,17650143539493759915,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,14766576832924859894,239819669032237921,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:9
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3784,i,12833584836303885726,1826728217474112183,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5212,i,14585265056459613628,10069266239896745051,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,1520419593261241285,3509711356439526138,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,1520419593261241285,3509711356439526138,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,2620124103982886263,10021634627456496864,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,13312866876928983748,10810757507941574240,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6540,i,5121195561276307119,3735101378399248338,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,15414176364907387596,4276818355992252999,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,18105010122238301315,17510974232973669464,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,4845270934245576754,14769624185054809510,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5656,i,16865859238424783003,11052396795344405450,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5408,i,15609321018491293782,18044981829788318480,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=de --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,12470787298847145980,7410186911336498146,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  PID:484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6544,i,14688460508152134069,16360634674516192411,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=de --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6944,i,17158187209391969379,5389395312170390112,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:14
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7036,i,13323669811481582054,18149296339322423759,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7352,i,12154514969420518063,3952977066950142069,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=de --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7348,i,8569430791361974754,13128313808515207368,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7588,i,4608774548617600740,11650235147031000601,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7848,i,167401642829595109,16336537036816973267,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7544,i,4958808339344203123,8276206499293221700,262144 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6188,i,791720496609960625,14834499470197677291,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7780,i,9779768954083210865,5604603024973196961,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7872 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7348,i,6276809082135041008,7624022607313520686,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:14
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5856,i,2450511149889231257,7385766967903420140,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,3648318846446468772,14785442975451401334,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:14
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7872,i,7933894200465557544,6729924161500396179,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:14
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8152,i,16253311927651790599,11304368870901404753,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:14
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=3472,i,14316495319397426422,3786777525484941470,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:1
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,6512167008057181432,14093772574500951201,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8460 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=3436,i,7564926498223801114,14190120331610881627,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,14490650254005506488,3615972836293647269,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:14
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=de --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7948,i,17894183184200118965,2604526254796461936,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=5216,i,13313022217946141128,9389954647353936068,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7728 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=4164,i,16932977922887745782,9971728787477472063,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8556 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8736,i,15473175033258047447,16379504882619569831,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8752 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=de --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8448,i,12187100984030708318,14642435784311630829,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:14
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9088,i,12670325184872696544,2127395753784430896,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9092 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=9152,i,9372705719258486386,16114378457301841849,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9244 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9320,i,2461032592520331483,11107440098205771179,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9212 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9112,i,1052778591914691720,2409926561357895905,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:1
  2⤵
  PID:6316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9264,i,17228720652393861597,8879339956583635868,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8716 /prefetch:1
  2⤵
  PID:6472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8752,i,16272393080410278443,711156351314175837,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9208,i,3393209089551631607,7752664173928482329,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9136 /prefetch:1
  2⤵
  PID:6756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9432,i,5063089390207765186,12971199452236075099,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:1
  2⤵
  PID:6868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8788,i,585934037649982359,2217997787636666619,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10008 /prefetch:1
  2⤵
  PID:6876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9424,i,6152984269002295107,3442611152982019570,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10012 /prefetch:1
  2⤵
  PID:6884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8008,i,8052969513001522730,14142244262809472370,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9880 /prefetch:1
  2⤵
  PID:6852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9368,i,6032725867904522431,12046288653869172891,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:6860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9388,i,4073858766576441824,10324083218114796655,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10112 /prefetch:1
  2⤵
  PID:6908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9912,i,16189953497454263000,14110980026357591433,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10100 /prefetch:1
  2⤵
  PID:6916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=9968,i,5490589074218386819,10974195136229353071,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10140 /prefetch:1
  2⤵
  PID:6924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=10004,i,11179118184042514010,8406682449281688001,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10292 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9792,i,4679286719528099075,2659923708459214120,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10084 /prefetch:1
  2⤵
  PID:6892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=7608,i,15872320965761802108,1006270343503179047,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8084 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=9396,i,4716089066979513857,9407463935745157570,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10088 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=9932,i,7338619455198203520,17006825537967549087,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10152 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=9992,i,8211147950411027081,16119365640574647842,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10160 /prefetch:1
  2⤵
  PID:6932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=10048,i,3192317215724643994,3197220194139598560,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10284 /prefetch:1
  2⤵
  PID:6948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=12256,i,1141434036338202125,11643314720953418873,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12260 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12364,i,2056167599066621710,15180593974641336620,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12336 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=12500,i,11726125313117527397,3718041139192515460,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12512 /prefetch:1
  2⤵
  PID:6780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12720,i,16353229451499877925,1361183240644383460,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12660 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=12836,i,7395169638932465591,14874462910319704254,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12724 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=12988,i,15306037886668665637,14966044575560293925,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13020 /prefetch:1
  2⤵
  PID:7220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=13144,i,3135438353284797332,4809507540786133427,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13132 /prefetch:1
  2⤵
  PID:7280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=13264,i,3354982812380382498,1772449546663584133,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13268 /prefetch:1
  2⤵
  PID:7288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=13484,i,15196470114228860317,15593464513212563227,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10000 /prefetch:1
  2⤵
  PID:7476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=13480,i,11827963596825162215,1606850507497915176,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9780 /prefetch:1
  2⤵
  PID:7468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=10144,i,16644940730180975460,8974382777405021938,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13460 /prefetch:1
  2⤵
  PID:7688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=9488,i,933408266749373479,15521497475689749866,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8812 /prefetch:1
  2⤵
  PID:7784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=11364,i,2983876308011478721,14165022736723983739,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13408 /prefetch:1
  2⤵
  PID:7932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9204,i,9433380535422197547,7278874194354749069,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11672 /prefetch:1
  2⤵
  PID:8004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=6460,i,14601338805231856878,14517226922137507246,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10084 /prefetch:1
  2⤵
  PID:7588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9488,i,7629353137095702619,11285968925477765710,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10760 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:6960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=11732,i,13379189373167028861,8730869636037454337,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11748 /prefetch:1
  2⤵
  PID:6724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=12708,i,12996190056577933807,10869969251359889092,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11388 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=13364,i,3727252225074934306,17596721968366787847,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9364 /prefetch:1
  2⤵
  PID:6732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12584,i,6891833706672447773,8970515176600452213,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13748 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:7844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=10364,i,5336165296694702400,1371336393864997413,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13804 /prefetch:1
  2⤵
  PID:8120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=12584,i,11757859990257494043,5624086479781880691,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11752 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=12536,i,10457321714432366541,11787720193444377830,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11332 /prefetch:1
  2⤵
  PID:8052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=12916,i,7714496683614872113,306408254683367048,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10040 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=9900,i,9892874426296952198,9641219740412545469,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12972 /prefetch:1
  2⤵
  PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=12500,i,11607955541586488064,8018641456771141263,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13324 /prefetch:1
  2⤵
  PID:7676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=11080,i,1422815116666437072,110551081499897305,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11032 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=10180,i,678498384656777890,9950491338865695922,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11584 /prefetch:1
  2⤵
  PID:7652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=12212,i,3571896222576410196,8582149178161969574,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11824 /prefetch:1
  2⤵
  PID:6712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11796,i,9431925947844279381,11766222727888159759,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11784 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:7924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=11500,i,18019989912134505766,7555536720397568775,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11252 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=10232,i,2590989881332543370,17207576899621045,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10500 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=13196,i,11731464422228809422,17095441932366077763,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10476 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=13152,i,17590096393229830305,5637400886440461859,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10488 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=13228,i,6958110585137024981,8487431919052110562,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10468 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=11636,i,15665380533724170276,7644345623595868826,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10496 /prefetch:1
  2⤵
  PID:6152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=13220,i,12200390875368749769,4074960451472485724,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11288 /prefetch:1
  2⤵
  PID:7152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=10052,i,3391928780929026046,6032565000480731022,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11276 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=10036,i,17166785643880406994,8234483026267169250,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11244 /prefetch:1
  2⤵
  PID:7164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=10524,i,9323991658048633034,10408006585879440274,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9956 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=13160,i,492202158703463431,18189085351601866715,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10896 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=11600,i,8336974349365322508,8534041581307548886,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11300 /prefetch:1
  2⤵
  PID:7000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=10504,i,7519285511499384167,1151008515897342480,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12244 /prefetch:1
  2⤵
  PID:7524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=10860,i,13306712493670256685,17009891555486419539,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10712 /prefetch:1
  2⤵
  PID:7016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=12572,i,14755467221047835466,2300675925633568699,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13852 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=13108,i,13303221889961679864,14215586855385968529,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13116 /prefetch:1
  2⤵
  PID:7412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=9316,i,10260733777569784166,12939992091540179406,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:6564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=12740,i,9693616673043232375,6602295813354463075,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9204 /prefetch:1
  2⤵
  PID:8012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=13176,i,10576444018921877240,1981180206671895991,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13544 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=12496,i,13035249959645950966,4659450348865045167,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13120 /prefetch:1
  2⤵
  PID:7560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=10656,i,17749536738579274448,2795367820293178545,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12540 /prefetch:1
  2⤵
  PID:6496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=11880,i,17452014971225291378,5133979073113253568,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=9524,i,5805280335431452879,15644054146975272154,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11916 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=8852,i,10193392587538958819,2713413248009135046,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10900 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=12192,i,8990694085720571722,3780912893673447872,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:1
  2⤵
  PID:7664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=9412,i,15708884898793905873,10568930272551695310,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=9424,i,13061758515630108307,12421999719006375335,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8760 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=9948,i,16439406255631067982,915754549992237236,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13056 /prefetch:1
  2⤵
  PID:7876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=de --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,1958286122282811881,2212735851428559881,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9376 /prefetch:14
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=12652,i,16535167810994911862,14235058410478749094,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=9412,i,5270292766355339595,8315706942229102477,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10836 /prefetch:1
  2⤵
  PID:6960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=12084,i,15545064675792447447,14790177902137736932,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11844 /prefetch:1
  2⤵
  PID:7024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=3892,i,9302317953101974485,2509083478666364081,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9188 /prefetch:1
  2⤵
  PID:7816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=12784,i,8771247264473938220,15756831969181503969,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9252 /prefetch:1
  2⤵
  PID:7760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=8844,i,5307179111837247288,2799165300706897308,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13476 /prefetch:9
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=11268,i,9332446980622472459,17721647043937588259,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9532 /prefetch:1
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=8100,i,7169358275185703301,16037645637553899166,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12228 /prefetch:1
  2⤵
  PID:8036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=9752,i,6085777179762428976,7921902874570655525,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9728 /prefetch:1
  2⤵
  PID:7848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=9700,i,11675627769788730968,12502554158657464516,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12084 /prefetch:1
  2⤵
  PID:8044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=10356,i,3079714228231690118,6992288657289738127,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10020 /prefetch:1
  2⤵
  PID:6672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=10648,i,17893364871919107640,17689724649195821580,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13780 /prefetch:1
  2⤵
  PID:6968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=9916,i,16243305062721276990,15997189678433849808,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12184 /prefetch:1
  2⤵
  PID:8096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=8788,i,14525529580408820544,14423423142580142992,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12700 /prefetch:1
  2⤵
  PID:7148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=13496,i,6669508963932639965,1322049213428073610,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9740 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=10380,i,10763915285870367494,1958639231246606331,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9692 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=9180,i,10355200354062967286,7471524232133479693,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10264 /prefetch:1
  2⤵
  PID:6580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=11192,i,10606007897383496910,10699638328331563610,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12340 /prefetch:1
  2⤵
  PID:6572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=13772,i,16680689796528824208,6045454454293523367,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9720 /prefetch:1
  2⤵
  PID:6316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=12568,i,10570331016649654003,8285064400363955174,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11996 /prefetch:1
  2⤵
  PID:6948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=9788,i,3195668818319010299,5514454978839998880,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11360 /prefetch:1
  2⤵
  PID:7552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --always-read-main-dll --metrics-shmem-handle=8736,i,13762585350457609665,7193349282955847830,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11004 /prefetch:1
  2⤵
  PID:6644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --always-read-main-dll --metrics-shmem-handle=12012,i,808969754830241491,7041140576964573880,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11600 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=7548,i,13549743902006927326,1835233073675162809,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=9068,i,9633721842471874391,5438110364393872700,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10580 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=12004,i,4915925505785412254,11563254463734998632,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10780 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=8496,i,2994259636309844317,13155728649366402766,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11392 /prefetch:1
  2⤵
  PID:7708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --always-read-main-dll --metrics-shmem-handle=11664,i,11582673925036569461,11504099214667740,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --always-read-main-dll --metrics-shmem-handle=8860,i,12341961956070249533,7653588474097501831,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9544 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --always-read-main-dll --metrics-shmem-handle=5808,i,12012411983145101889,9317503030910003553,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12572 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --always-read-main-dll --metrics-shmem-handle=9108,i,2154593515399106079,3690417164826343842,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:1
  2⤵
  PID:7448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --always-read-main-dll --metrics-shmem-handle=13896,i,17908161224713616098,13076403089606074022,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13872 /prefetch:1
  2⤵
  PID:6308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --always-read-main-dll --metrics-shmem-handle=13816,i,656698077052491778,12474714881424888119,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14088 /prefetch:1
  2⤵
  PID:7368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10204,i,10281706431178023281,7045928242266602487,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14232 /prefetch:14
  2⤵
  PID:7040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14244,i,10118504682138091769,4272988771534757121,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9088 /prefetch:14
  2⤵
  PID:6832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14360,i,11991411781355322143,9406899082749434973,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14212 /prefetch:14
  2⤵
  PID:6492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --always-read-main-dll --metrics-shmem-handle=14748,i,16355013990938677692,13850243330641264043,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14760 /prefetch:9
  2⤵
  PID:7856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=14596,i,9751530602636036482,10903723896551468054,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14200 /prefetch:1
  2⤵
  PID:6860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=14568,i,17241098842586674476,9471430117659073059,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14212 /prefetch:1
  2⤵
  PID:7732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=14236,i,1032286217902062094,1293205017670805489,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14220 /prefetch:1
  2⤵
  PID:7896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=12992,i,6603801717614765248,18047089792379008297,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8696 /prefetch:1
  2⤵
  PID:6356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=14284,i,1308216181582535087,11661081002411291942,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14184 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=8072,i,11634396471341076552,9769250666130762950,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13396 /prefetch:1
  2⤵
  PID:7800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --always-read-main-dll --metrics-shmem-handle=8696,i,11645271109998946315,13998213957594223405,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10452 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --always-read-main-dll --metrics-shmem-handle=11748,i,9535471041126580442,5496450688982413844,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14324 /prefetch:1
  2⤵
  PID:7660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --always-read-main-dll --metrics-shmem-handle=10392,i,11682729500408972451,2755843500979497586,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14372 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --always-read-main-dll --metrics-shmem-handle=12532,i,3486364777660158130,11340551568855535964,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12992 /prefetch:1
  2⤵
  PID:7604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --always-read-main-dll --metrics-shmem-handle=14808,i,4713404832552046131,13305324942102197111,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11888 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --always-read-main-dll --metrics-shmem-handle=13004,i,17074544184767476345,17394305575297934810,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:1
  2⤵
  PID:6368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9116,i,10772276189536924419,15327271803042114474,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:14
  2⤵
  PID:7688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9116,i,10772276189536924419,15327271803042114474,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:14
  2⤵
  PID:7488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --always-read-main-dll --metrics-shmem-handle=14680,i,811984270650541503,15207112717704083544,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14756 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14372,i,17512935664642306272,12613915239625959784,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12964 /prefetch:14
  2⤵
  PID:7748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14460,i,3607602055815623171,18425934257057622153,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14468 /prefetch:14
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --always-read-main-dll --metrics-shmem-handle=8760,i,13958407200790442803,10187463176250793172,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12944 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11016,i,18389398302765187276,2240928197042940148,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11844 /prefetch:14
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=de --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,9944765395123219273,4014615127263234864,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:14
  2⤵
  PID:6328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=187 --always-read-main-dll --metrics-shmem-handle=8496,i,12529303386527221699,409101661384045691,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9944 /prefetch:1
  2⤵
  PID:6660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --always-read-main-dll --metrics-shmem-handle=12604,i,594205933906985271,8640149768544845053,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10228 /prefetch:1
  2⤵
  PID:7236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=189 --always-read-main-dll --metrics-shmem-handle=14784,i,4053579798734191744,6229139562477702489,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=190 --always-read-main-dll --metrics-shmem-handle=12244,i,16915672290743818854,7661336204385663267,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12256 /prefetch:1
  2⤵
  PID:7444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=191 --always-read-main-dll --metrics-shmem-handle=10600,i,9207608121869984032,8769404091052510652,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=8120 /prefetch:1
  2⤵
  PID:7112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=192 --always-read-main-dll --metrics-shmem-handle=14636,i,2131693136226295767,7729341906765937998,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12972 /prefetch:1
  2⤵
  PID:8732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10268,i,18095758889322006051,14847594989582888865,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11064 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:8828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=194 --always-read-main-dll --metrics-shmem-handle=13716,i,10775395795263736561,17969947375259728436,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10736 /prefetch:1
  2⤵
  PID:8268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=195 --always-read-main-dll --metrics-shmem-handle=13244,i,5983127642831059414,12884887988168978204,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13640 /prefetch:1
  2⤵
  PID:8276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=197 --always-read-main-dll --metrics-shmem-handle=6200,i,318456949892771518,9658528356460997627,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11284 /prefetch:1
  2⤵
  PID:8292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=198 --always-read-main-dll --metrics-shmem-handle=11660,i,5812557256826602372,10224412384766461625,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14428 /prefetch:1
  2⤵
  PID:8304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=196 --always-read-main-dll --metrics-shmem-handle=11060,i,11000298875211684317,10226411097590325998,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:1
  2⤵
  PID:8288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7476,i,2008221637611328715,6645267183002753351,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10736 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:8996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=200 --always-read-main-dll --metrics-shmem-handle=14756,i,6105897998796665797,18405759962822736963,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:1
  2⤵
  PID:9100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=201 --always-read-main-dll --metrics-shmem-handle=15024,i,13038838873483314333,9730967188476107189,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14516 /prefetch:1
  2⤵
  PID:8868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=202 --always-read-main-dll --metrics-shmem-handle=14772,i,699385762667849107,2780834944080056286,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=15284 /prefetch:1
  2⤵
  PID:8904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=204 --always-read-main-dll --metrics-shmem-handle=10824,i,6587863823718367318,5659961708478774358,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=15220 /prefetch:1
  2⤵
  PID:9148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=206 --always-read-main-dll --metrics-shmem-handle=15048,i,14250896840608267977,4557551735396173710,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10772 /prefetch:1
  2⤵
  PID:9164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=205 --always-read-main-dll --metrics-shmem-handle=15320,i,16473253886624604485,5816357740674090261,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=15404 /prefetch:1
  2⤵
  PID:9156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=203 --always-read-main-dll --metrics-shmem-handle=15340,i,16760625210876001394,2740770686446049997,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14636 /prefetch:1
  2⤵
  PID:9140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=207 --always-read-main-dll --metrics-shmem-handle=15384,i,2134589440073315921,5995701646343224552,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=15436 /prefetch:1
  2⤵
  PID:9172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=209 --always-read-main-dll --metrics-shmem-handle=15980,i,2990302382553958920,7786601877568430078,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=15996 /prefetch:1
  2⤵
  PID:9192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=208 --always-read-main-dll --metrics-shmem-handle=15968,i,1881037512892777340,17422978690000922179,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=15988 /prefetch:1
  2⤵
  PID:9184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=210 --always-read-main-dll --metrics-shmem-handle=16092,i,8059988476718917267,5139350471203515352,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16100 /prefetch:1
  2⤵
  PID:9200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=211 --always-read-main-dll --metrics-shmem-handle=16020,i,11166355546666585546,18061509849813834076,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16148 /prefetch:1
  2⤵
  PID:9208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=212 --always-read-main-dll --metrics-shmem-handle=16524,i,1647922713671140137,11727455251848808785,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16604 /prefetch:1
  2⤵
  PID:8196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=216 --always-read-main-dll --metrics-shmem-handle=16592,i,15479375108807652121,8791374934463196887,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16692 /prefetch:1
  2⤵
  PID:8240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=213 --always-read-main-dll --metrics-shmem-handle=16536,i,8113088237258932135,6047532947344002254,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16664 /prefetch:1
  2⤵
  PID:8200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=214 --always-read-main-dll --metrics-shmem-handle=16548,i,15114596859954705382,10169073834412420945,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16668 /prefetch:1
  2⤵
  PID:8212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=215 --always-read-main-dll --metrics-shmem-handle=16560,i,5885650962294450779,15179577584783224662,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16680 /prefetch:1
  2⤵
  PID:8220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=217 --always-read-main-dll --metrics-shmem-handle=16576,i,9424502168824648821,9056255460324359077,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16712 /prefetch:1
  2⤵
  PID:8252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=219 --always-read-main-dll --metrics-shmem-handle=16848,i,15672328207717272356,15523356495537556798,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17204 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=218 --always-read-main-dll --metrics-shmem-handle=16780,i,16907535345593662472,13135608833127732800,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16988 /prefetch:1
  2⤵
  PID:6860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=220 --always-read-main-dll --metrics-shmem-handle=16964,i,11755501654031505248,5933443278075392396,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17356 /prefetch:1
  2⤵
  PID:8260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=221 --always-read-main-dll --metrics-shmem-handle=17028,i,14551221325339540410,13462374846131958334,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17544 /prefetch:1
  2⤵
  PID:8328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=222 --always-read-main-dll --metrics-shmem-handle=17048,i,2799066287985223707,5083661444071783727,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16972 /prefetch:1
  2⤵
  PID:8312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=223 --always-read-main-dll --metrics-shmem-handle=18756,i,17016990368133305813,16920054599684779598,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17348 /prefetch:1
  2⤵
  PID:10116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14696,i,749421131186863982,1448979126851868963,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=14528 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:9872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=225 --always-read-main-dll --metrics-shmem-handle=13600,i,12572455532016091746,13426611039626657409,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17764 /prefetch:1
  2⤵
  PID:7608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=226 --always-read-main-dll --metrics-shmem-handle=17968,i,17281930953555926500,17190621349465376621,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17328 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=227 --always-read-main-dll --metrics-shmem-handle=17380,i,17896963063676945145,15618769596776120775,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=13716 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=228 --always-read-main-dll --metrics-shmem-handle=17412,i,9765072964264267393,1741581011935593027,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17648 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=229 --always-read-main-dll --metrics-shmem-handle=16704,i,8640794325456528064,16974138042999755697,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17664 /prefetch:1
  2⤵
  PID:10100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=230 --always-read-main-dll --metrics-shmem-handle=15312,i,14750710480259621961,3222177068670262203,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=18568 /prefetch:1
  2⤵
  PID:9132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=231 --always-read-main-dll --metrics-shmem-handle=16712,i,3797224688296015763,5192564899804215600,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=18512 /prefetch:1
  2⤵
  PID:8896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=232 --always-read-main-dll --metrics-shmem-handle=16876,i,8350678811567074692,9458788530815434166,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16284 /prefetch:1
  2⤵
  PID:7044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=233 --always-read-main-dll --metrics-shmem-handle=16356,i,909978475985949624,5725642386589983787,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16348 /prefetch:1
  2⤵
  PID:8304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=234 --always-read-main-dll --metrics-shmem-handle=16332,i,4664114312818259218,387335471658090048,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16336 /prefetch:1
  2⤵
  PID:8596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=235 --always-read-main-dll --metrics-shmem-handle=16304,i,15590890969294563245,12901769629447766737,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=18280 /prefetch:1
  2⤵
  PID:8604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=236 --always-read-main-dll --metrics-shmem-handle=16932,i,13367479243435523116,12994572889514332368,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11444 /prefetch:1
  2⤵
  PID:8572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=237 --always-read-main-dll --metrics-shmem-handle=16280,i,2472058665329061826,14402111561931359570,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17304 /prefetch:1
  2⤵
  PID:8728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=238 --always-read-main-dll --metrics-shmem-handle=13432,i,16154374141029122972,15861378315091689029,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:1
  2⤵
  PID:8272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,6889486792790398709,1073779672646594870,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17280 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=240 --always-read-main-dll --metrics-shmem-handle=15272,i,10480586298014686104,16073430462028608709,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16844 /prefetch:1
  2⤵
  PID:9128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=241 --always-read-main-dll --metrics-shmem-handle=12860,i,4345684940191347962,11363450135766505623,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=10428 /prefetch:1
  2⤵
  PID:8252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=242 --always-read-main-dll --metrics-shmem-handle=15728,i,15774267771274900745,8222368339948617139,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=15692 /prefetch:1
  2⤵
  PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=de --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=18796,i,232550938663398734,204641403113359949,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=18172 /prefetch:12
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=244 --always-read-main-dll --metrics-shmem-handle=17988,i,11469761192902816002,9933479476813177437,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17432 /prefetch:1
  2⤵
  PID:7620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15288,i,1747061075341649798,16726551427907464849,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16772 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=246 --always-read-main-dll --metrics-shmem-handle=18276,i,9366387240373247040,15211899572958734959,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=11072 /prefetch:1
  2⤵
  PID:6376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=18508,i,6139052354564463512,1619996504886125052,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16784 /prefetch:14
  2⤵
  PID:8888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=248 --always-read-main-dll --metrics-shmem-handle=17308,i,16426304984024913941,3203036006315518337,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9516 /prefetch:1
  2⤵
  PID:6640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17952,i,13167553318938101597,15293089385361965730,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9052 /prefetch:14
  2⤵
  PID:8112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=250 --always-read-main-dll --metrics-shmem-handle=9020,i,8616112738846947521,10326266515239502396,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=16192 /prefetch:1
  2⤵
  PID:9636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=251 --always-read-main-dll --metrics-shmem-handle=15392,i,3090182309153552600,6315709495637986905,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=12708 /prefetch:1
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=252 --always-read-main-dll --metrics-shmem-handle=16112,i,13248968838441065171,14630226784088020110,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=18752 /prefetch:1
  2⤵
  PID:6704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=de --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=18672,i,14003838042134856199,14415889348065664156,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=9032 /prefetch:14
  2⤵
  PID:9536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12508,i,8472210786307005055,10977201428006642750,524288 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=17376 /prefetch:14
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=256 --always-read-main-dll --metrics-shmem-handle=19372,i,11113063873036821372,3723862960159840074,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=19440 /prefetch:1
  2⤵
  PID:9772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=257 --always-read-main-dll --metrics-shmem-handle=19240,i,3018129976825863468,10872379645330424224,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=19200 /prefetch:1
  2⤵
  PID:9064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=258 --always-read-main-dll --metrics-shmem-handle=19396,i,16472305548942636459,7739681538940439995,2097152 --field-trial-handle=2300,i,8106131081115175182,14133909703429243531,262144 --variations-seed-version --mojo-platform-channel-handle=19056 /prefetch:1
  2⤵
  PID:9016

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5936

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2164

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4208

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {c82192ee-6cb5-4bc0-9ef0-fb818773790a} -Embedding
1⤵
PID:1356

C:\Windows\System32\DataExchangeHost.exe
C:\Windows\System32\DataExchangeHost.exe -Embedding
1⤵
PID:1480

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1228

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6364

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4304

C:\Windows\system32\msdt.exe
"C:\Windows\system32\msdt.exe" -id PCWDiagnostic -ep ControlPanelSearch
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:8344
- C:\Windows\system32\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\pcwutl.dll,LaunchApplication ""C:\Users\Admin\Desktop\UndoSync.exe""
  2⤵
  PID:9988

C:\Windows\System32\sdiagnhost.exe
C:\Windows\System32\sdiagnhost.exe -Embedding
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5904
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\hxhk3qah\hxhk3qah.cmdline"
  2⤵
  PID:10004
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES3488.tmp" "c:\Users\Admin\AppData\Local\Temp\hxhk3qah\CSC9F79A9E2270B43F4BD96F2F3241F3228.TMP"
    3⤵
    PID:10056
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\45zdqgw2\45zdqgw2.cmdline"
  2⤵
  PID:3008
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES3553.tmp" "c:\Users\Admin\AppData\Local\Temp\45zdqgw2\CSCBC35DDF6F7E2451F8E8EEC29CE365B2.TMP"
    3⤵
    PID:10168
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\lo4ph41w\lo4ph41w.cmdline"
  2⤵
  PID:8732
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES3880.tmp" "c:\Users\Admin\AppData\Local\Temp\lo4ph41w\CSCB35572E55502495F9D6DA8A7BCDAC927.TMP"
    3⤵
    PID:9580
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\mm35ro0y\mm35ro0y.cmdline"
  2⤵
  PID:2912
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES72BA.tmp" "c:\Users\Admin\AppData\Local\Temp\mm35ro0y\CSC8576FD78AD479DA51CA135ADE9B822.TMP"
    3⤵
    PID:10136

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Suspicious use of SetWindowsHookEx
PID:5788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b569abebbaaf26f699fc69b66ce0f336d08065af2ccdaaca5421accc53b1c38
MD5 15b32961d6a7ecf7cfd3ed499d358e3e
SHA1 589fb245bb41b29e13242bd8947dc01c5b630829
SHA512 3a094a8184c961e25b25654d47755c2deb772e3e1b40c8e2d156493c5e3abf0dc6eed344ee5135af14f7c22f3d3e81b8799bc96aef8baa0b1a851cef7f08b753
TLSH
T183D09734A536AA91E01A813504A0360021260133359BAB8321A0840C89B000092F6DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 3c6d21fc00b07425025c9bbac77f0ef1fec6dd8a24f547ab971456515b3a628a
MD5 01802f4cfa21366645a05fe4a2838855
SHA1 d5a1166de6b525172e79cf28b482e156e9bfb456
SHA512 1c9d42cd331b2d5f7a75db14b224898568dbf468697f40427213ed83e96d3ef1032c76cc0537c26dd9f5c03cfb19d3f1285859dfc5f2069fa05ca3d70c4ddaae
TLSH
T107E026E449CDC32EEA5C6447516C430CD2C1366AD7C9F91A1740858C7403040E783EE0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 491a86daef843d6065b0dfcc6b0287834efc2f8c5688398f5c01afce731e374e
MD5 2d46b873723171c00fda1a038a81874f
SHA1 6f4b2f0688cc3f9da9acbdd339595f0388a6bed6
SHA512 b10e182346fc647aef55760aedd8af818a73de95062aba46896550aa9f4e4c86b51ad31130247abc57a512d2c01b9f6e9db8654199c1788bce4de2af5a255cd5
TLSH
T1FCE026A894CEC2AFEB58E4479368474CC291364B93C8F96A1740868E7442044E7AF690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 86c80254d669289fcf6280ef2471506948b8074c28a48c7d3c3d1e5421ac89f7
MD5 80e1225d034581578f1593c12c3aa7f0
SHA1 a082ee86f9dd3fc1ae8bd27a39c23db1bd02f228
SHA512 cddfb9d99e792dc7646be88f4c85ee4c4ea1d1e823877463944ca9a45cfb1907dd9f04d6b707b5e273aa9498b1a985a0e18eb9dfda3e0f8ac9d043b686e8865f
TLSH
T1CEE026E44DCCCBAEFF48B447917E830C9281365A92C8F99A1740899D7502040E7D3790
MD5 SHA1 SHA512 TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 68KB
SHA256 096265551a5ee356be7ccefaa40a7de3929105288e029cda15c965cb65b55eaa
MD5 f6709d44783ca7b4b921437ca7dd2727
SHA1 a0c6e731ea03274fd0420c360b5f8079ca719138
SHA512 34b45e20793f4de99caac1c28fca40953d4bc2902ddf4dac70c55bc28ae28cf01632095b20317c8c661832fc1b971fdc2eb05450ef8fcdafe74a5084589ad52a
SSDEEP 1536:GeXJHPV3M/Ib+Npon9pSlmtHf+SxQBEnhB35LsKMCoNx5p1WFK:GYV8xNan/rp+SxQSnhB3aKMCix5fWM
TLSH
T10C6302D8DB1C78A3B3A11891398B31876F920AD1DB0C79167D7F521E5B623EF4071B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 406KB
SHA256 c9ec15f6b284850a9e9c19a7e64a22154929e0f9e15a44f9f7e394111739fb9d
MD5 9216d5af8ede8d6bad7e05785c4f1536
SHA1 6196a652118779feec14a3c1d560d8a85fb296ac
SHA512 4707760777c417037805268bcd345cea67cdbf895ea01a002a157f9442c81520dbff93cee7047922e1513321e90db2bbc4d62365a5cbe51f308f484d7aedbec3
SSDEEP 12288:O+3o7mAmn/5Y8dgX4V+1iOF8MB/noCWnm3LMZT7LDkwFdqM:OrKAmxDgoV+YlMVn3kKLMZTbkwh
TLSH
T1879423FE7405ADD11AAB541F91A0DF9284D045E178637B997EBF4CE8A84CA27C4C8ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 225KB
SHA256 8ccd01c955a8eac86b423f7b752a84aefe1c7fe0e3d8c468f6245ddce5c92a30
MD5 71e2e52e5aaf533d00fee20d33ea1c91
SHA1 bc7ee77e17d8e0d6e628c93ad045ee1d31634936
SHA512 3c6eec13b3806bba84affb991124d359c614d9511326595f5fc304a829e4c8efafdb5229b39d4ad47ea39ee004d138a1b99fd0dcc6b440f6023d2f66978105f5
SSDEEP 6144:7YDnBfO1uP5a1z5KDNvP9EeNmBpnjlwK5v+:EDnpQalenjqQv+
TLSH
T10C3412B56B5F6FD0989C2B0874A2F0373A654D16E6CB150AE5EF0A7EC80D520F95D03E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
Size 44KB
SHA256 50e7901c632ff5f30d1b0852616be23b9cad1c8036bb1bd09227d5d0b985b531
MD5 dec06c1186889507d8a37ee99c32bffb
SHA1 f0478608b19169fc15028c39232a2c4691651e30
SHA512 d323e89977568c58d0b0531f9acd50c6541aa7c8c6a989f0065001140e76dc4da0e02de4ebed27308a0836fa74179e9fae5e1478367a61c8bbb7de0de853e730
SSDEEP 768:qjCIwDNLtWYMkvctQN8KPOVNhsRH/Keh62zfEM59FZbb3xLG3KrgrlqCHOCB:lDht/NvQHV8RH/KehNLV593bbBLGarm/
TLSH
T16413026CBF5F78B40E582F13CEB96A10BB062BC88C3F28C50415E2B1BA510A71AA5563
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 512KB
SHA256 c207f2528ce4320eef9cab5107f01152076a10af5ca27058a137337a25d04f3d
MD5 d7eac82a205755cb9a63b0b0f99a736e
SHA1 0833a69a06587022692d10d60afe0a72ca239c01
SHA512 0f356bd1cdd382cfcde9b5d8f19484614c29f5d5b385f61c413b49f84a7ebd3edf4760b0d9da40f00c7da638d8de359a630270677f017b885dff1602b89adf52
SSDEEP 6144:PHzUSyU8Z8dZ15UUBLHj+4fy55j4qWafLgTxpfSMI727Ztju+Xg3GY83sdm:fzUSy2CUBj+4a55lHLgTxpkkjTXg3T
TLSH
T1A9B41272FAD7E782E753DB78E11EAE6B097C19CD25D0481DC1012E4875A92B0FA072DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
Size 128KB
SHA256 fe20c4e52c088139acb5d099348090eb0cb010a543872ff364ff5aa41aadede3
MD5 a082b8634c485274ace63b195a1b0f95
SHA1 99fb5fd0bbbb347d58ac2ae7bb05390bf1efe4c0
SHA512 f4e1fbdcf7280ff7f511b7d60d80f3946827f470cc8910bcd3e056756b1c872a93ab07d3b214b2a164a9457d5ebda80d3dbc2221269af131ecbc38e99b0675fd
SSDEEP 3072:0TrPGA9fgDBeXGf8jaNL7t7imgkLxLP7ZuohfUkmrksUNW:0TrOvUGjfFdb9HfUrBUW
TLSH
T19BD39E68FB8397C2CF5B6BB8F43C2E330B4512D635C51E1746665C22A5C832AE60B65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 17KB
SHA256 7db8d29c8169f3611a9ee9f05f9d3fd5caedc7693af33feb65f436a80bd33240
MD5 24ab21da3b67f721475e95ac2770dc21
SHA1 b964c8bdbc4ff708b283d9e052c1bf4947b29e09
SHA512 45e939b7bbc3b7ae47ea3b778f4ddabc3bce06f0d3fad4d2f1851fb43597e4c2b7eabd0678110a20a0181709b7dd039191adbd40e7b6f1588f2a3d5024268a27
SSDEEP 384:8KinigLYvNlzoASrDAR/Vy0CbVJn2esg1OZh/3ie:8Fi6YVl+Da475sFf
TLSH
T12D82D0556096AA71023FFD477D0243ACC69D38A8B4D7EECA5930AFDC08296D1D64CEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 56KB
SHA256 631ac6b47af403356db81376220724c58604074ae4e6312f775dc5783ab6ce61
MD5 95219edc7f5339209a4b0e69d3a3b5ae
SHA1 e95736dcec5ff384bf23573cc0e6e72e2f518da8
SHA512 b989653d617e404b92dcabafd7489a596e3fc026b675b0abef3bd9d8fb338c1bc8c629deaa1a46a30b0975fcd712c8a18533dad983ce8aec14b4f4db078d6d8a
SSDEEP 1536:xNA8L9B6UDoJEHt7fJb+/wN65MFsNaxWUmR0WNmCo:nHpNb+/p5vaxWt0Ezo
TLSH
T10B4301E313A523334A9B6D7C101E5B175A973B2A3F2C84EE57A4426D7804EF89D20CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 256KB
SHA256 266387d6179d8cd4661ef22124dc479059fe8e40758feb4022b2cca865cb654a
MD5 fcd6fe1438e4149e6a7128144033a8d4
SHA1 360237dcd048317694abe16fa8d8e9d0445969a2
SHA512 24b22bb6a1388315f42f20495d5593da0ec537840f9ae46e4cb71cb090f1611d341492f7cf091dcacbb8d85478f4e4e51e45801b505708bab2e597717fe07fe1
SSDEEP 6144:fc89w5sS4So6X7GUfKyxW12Hngz1DwVETKG5:fHQ48XViyxWjZ3F
TLSH
T1E6440250FB564388DB032A36E4583E671E626AD530D37A0906A4BC12F81699FF33FB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 256KB
SHA256 058eb9674b820893fff9e55cfe93bd695bd889d05f0f90334d3b989715777d83
MD5 9dfb182f3c052fce549551574c7b340a
SHA1 0c3678063cd5bb8bd5bcdeee48f0ef6e7e010dd4
SHA512 64212b0e9cc7518893beba3f2df2dd5a5b228c1f267f9765ef9c5ae328cb7b7abab8f3dcd574aebeecc543f2ede018b5e69412bf57cc840dfce9125b97e1f9c9
SSDEEP 3072:kgfDA0xxnEw3BLm2IZ/TD50hJlxfboz1c+mc/a9tKcJ7K:k70xxEwRMZ/ulxTslkJ
TLSH
T19C441674F7C3EB82DB4326BDA03C3D731B9401C5A1C5591B49A39D61A499B3AE30B93E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 46KB
SHA256 fb1f7da31b3e3a52619ef8586e9fbe2a2d08608fa4075a3b3e54006db1affa60
MD5 8a0603a7b217b3b806642b5fa5552951
SHA1 947a90c7869413b842b88011eaf81e4b76f10111
SHA512 45a97b0297ee39679887ea5b6aa432affa9fc97acbfd44556e5da3e8e24f0a7bf162ad7fb5bfe00118d0c73ec6ec1fad55071f81ce882148c6a814d3c9a6a731
SSDEEP 768:kXpPULjakGUNTbU5DpU0fDYqF77iyq0NXtvLaTMvmUDcdgODKFkdNaR9mqh4iqev:OKG8NTbUHlfDoqXtOTM+9dghR9mvEl
TLSH
T16223F206E1213FA171E17F25C7DA0842BC6F4DB52C9503A8B8B9AB5A1F9453FE4906CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 17KB
SHA256 47849169f7bbd67b9ec089dbf0d3c48905899ea2dd797701da9d7e0ab8828bd3
MD5 7d2885375e234250fd5402c5807fb2c4
SHA1 c7dae83944e86749f221cf0ec8498f8a8ad500b6
SHA512 fc9fa236ba5528ff37da711ee76f426411c0e02ab15941b76389ff3cb5d2c4848f92feb10d420953aba81a2e404557b7fcc5bea2b976fab48ca366ca48f4961d
SSDEEP 384:I6bIOtpB8E58XxbwPTG9xWUf6ULe//OiofThj7CS4CnzdWqKD+lVzUl:IQI6wEuXJUTOhSUsWiyThnRfzcqKai
TLSH
T1E082C0FD0B5EEE07691A3988C6619B63084875D7A28D251877C4E4ADCEF7B32DC031D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 19KB
SHA256 46e2b75f5f38dfd0a844147f970d0a40e5b07adbd6ceea95712616f6a2b65e96
MD5 a22dce9dc38b748da59f7f7a7d90643e
SHA1 95d0501dbad213b6fd006e4d37f9f0856377a48d
SHA512 a945ec6441814c8aa3b462cf744342afb45121000c200ad41bca935ea3da3f668098e7f51ebbcdb3ac1368e02cc7a47abe4664ff8348a65576bbff05d64578ba
SSDEEP 384:Cr6JWF23Qa2mtUMuwmg946XUXTLKtMoKQdncgYYaaFzP0JVC:CGfemmYS6XcLKtMkcgQ+P0/C
TLSH
T1CD92D14E10CCA0235FB194E54264F34AD98C019AABFC668E8FD958E0F9B7CB4365715C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 17KB
SHA256 45f853bfde5497fee0ec39e378b8940d9bedee1c9ec26cd0609d31786f00cc33
MD5 fb22a9c1cb9acb212cd5879b029d1006
SHA1 a7fd325e50874c33ae4992100d1e54c71d3111f7
SHA512 02fe622a593b7bb3f7c2c8dbbf7fb6262a70c9761b74b759c5f37bca13239d7d6aaae5877c1b25c52914dff3fdd33377d2c44866100db28e992545f3aaa21eaa
SSDEEP 384:h1v82unP6XE7WxwJ3ejNo+EsRAvzG2+LUosD1O5G7:hCxnPHJ3yoB2AiRUo1G7
TLSH
T1AA82D11D17E188E06E3CF8016CA5A8246CD17BBB7FD2167D1A09796D2CF98B01AF9714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 19KB
SHA256 e638f299997ee5dae3c3ebe6f2b9d2ea4707281e5c5a03062ab680d012ee86a5
MD5 f661de2fac30eb8b85bf199124d973af
SHA1 f2831b1c44b0ac8ac97f126bbfc1a2b7bdc55229
SHA512 4d1733ef3ae093f68ead0c40c32178c07575e320cdc704bb64576fb8d65540afb5e942155ab44b842224f33eb94f1f7552da7a2612fcb8a3b5ae319f88fb7362
SSDEEP 384:Y27r6oMJ9jurWur+zo4XBzRuiOD8VSJwE2GZLLkkwqAeR4OQ0GnX:V7r/UAJ+04DbOePE1ZL7KePQ5X
TLSH
T13B92D0AC3E10AA05EFB1219E59B73A07DA07518F25387162A14C48FF1DEA95C50FB27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 32KB
SHA256 baa1977b45467d93164a21ca8f1740256eb538cd925e3521b56cbeccd4fcd60d
MD5 d0a33e840b3127553011e92af4d28bbf
SHA1 c8192f72f6630548b1b5ebf085138f5e201b0d7b
SHA512 964e57c62050b41e31c37d487c3eabfbac6a9afa5d3325c8441c596cc2f9646ff02d8aa09f2ae1a103e94e45144df9186f98a8e341496e39aca613ecc0ee4528
SSDEEP 768:htjSLYGAChaQ/C0Vazvcg4NWjCw4ujfvdyxeS930rwVaMrKN:hsLYGeUVaIgP9ndU9EkVaMrKN
TLSH
T110E2E1413F9F2A79599C9C2A92EF81F23CB2839967BDF1096C8B6178C35834244735BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 994KB
SHA256 b98417f7ea52bc229a928c0136267c0128b6402b1ddd2643ba17ac4826cc16a1
MD5 329f71afb4252b1da626858128486624
SHA1 ca179b76fe665e1744fc7c99e34d24c7826d8f56
SHA512 e67fffc140586f313a901136dd448f96b2889609835865389c4131565e63b8e36df0a553e44f730b7b08c40be3cad228e2b54cd673d479436a2ccf15bb063ad5
SSDEEP 1536:QZyv7RTwb365jCIwGxIIjdBypEcKeFSzOfAlg7Bx465S/1mJAtyCUU:nvFfjOEDeTW6ewU
TLSH
T19C251C16BBA2AA03D41A5A754AD5D3F03331FC894727C6033ACE9E673F4DB822E452D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 37KB
SHA256 3b2ed8580badeaa0a72cc2435885d89e8e95d14d662a798fdb30daa14f0b39cc
MD5 a3d35c02bc5e98da4319006448bf7a8c
SHA1 0c93016beed5ce6b98a79b6f50d53b6616e3017e
SHA512 6f57027640e34ed172d6f5bad941c7a86ce0015f23e9fae130dc95fb4884bb1980e016871d0ee411cacd87984f2008f3192db0d770a67d65dca543a722bf6243
SSDEEP 768:a0/oxezMrWj8UT7KkM3loDswetvC5XPK1P9ELxPILst7uBvYrXgX/5t:5QxNruDMloDV/CfEjtaBvcEt
TLSH
T1900301F6DC6B045A86377FC030FF82CA6A0F67141A97E080202B899F719DF5657D5A87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 16KB
SHA256 dd1b1bc1b12378c3f2d5257e13fce269351f7205c0b1d9a353bb6519020cd4dd
MD5 1828eec30395f0667811a9b55c744f2c
SHA1 62389846e8e32746da94a1cd5874918bc6f61cbc
SHA512 a5baf8d674ec9368cc53cf6074f6734dd5c01a7372bac636df0b064617759485d480b6dbc4036edbfaf5e54da5c44363fd51d76897fad1e959033897b377510c
SSDEEP 384:WBY2ZpX4PZRjQrzKRr39XXU0AoL6RHYnF+CP9JhBI9V6oB:WBV4PZCKV60AoLaYnY294Vv
TLSH
T1E172C0D059E96EF459DA15C4083D61105F23B520ABD3C7829BE24A72EEC27FC16FB490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 27KB
SHA256 3367b389a5b1f934c9e63140cbc5c945b8e4159d944dbd2b4072cc3cf3e31096
MD5 70af9b598787373ebceef004ad4fa5e0
SHA1 148f6aa2b4cf6c247641c39e327f509dda995de4
SHA512 0abb9b94bc3195e159f5084b5a6e24c95f243fd44c66485e187c0f985a285c2bb3bc50d58cf3e99ff166d29f7c841eb54a62032069ff8b1c4f1a8e7f317d956d
SSDEEP 768:LlON68NzxdBKvC94QDiz2QhJh7s35vMRaN:LlQNbMCSgQVaN
TLSH
T187D2F190EE1A021FF77AE054195233D437B134FDB5A04F8D6E9A32D85F894209A7CBC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 43KB
SHA256 dea233c605bd137a073a956f70ccbacfb1f8a4e086e35c3771d672ebfddb2211
MD5 dde5f6f3982551bdc94b1867eb8f6425
SHA1 91900bd1700ace5326bd56af7f38424213d573d6
SHA512 ebf41508f8027dc4f1e8629422852c8cbedc63a38ca6a4d7cf8ba8d9d833a2c84821c10f1ca71acfd2bf9a4604fbde15744976a61f5b8c305a0136f1c67d2f1c
SSDEEP 768:wzVFpuaZGp4i44sLxs6yv/PfD0SyD0MYn8B2AjARFGqSxmq7ApjM4xUUucKIugDV:wpFOO/4sNqASyDukNMTsYq7IzxXSgAg
TLSH
T1E413F1ED4D8AD673C8507BC3452633832E508957EC5825A27AB54AFE29E1B203B1875F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 66KB
SHA256 3d9a661f6ce5bfcfc9181c8fb5969675d19f16fc9010f34df7a989e6ffda1bb3
MD5 e32c2cb7a32e4a1eeae52a243b9be40c
SHA1 63f78f96456e17f260ce71e97016718a844266ab
SHA512 8a2b19b76087628775c2f58f0265139c7fa08c00e6a5b48d3a97e52a322e518c577b68c5e94fd256f680963c3f86dd3fde1bc0fa4723d46cb7a7e68596f8909b
SSDEEP 1536:HHom1SvnVyuvMdXkYchznTwXWTdNl071R8lJJ/KKl0y:fStyua01hPJTdz07EfJ/KS0y
TLSH
T1B663128C338E0A2B718EB006E9312BB2F68D5E36FCA76362A56287545530CFE18D4073
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 38KB
SHA256 49e64d3ed6fa7cd75bd9e1d68a4a6db1667e4706f6354a97bf562dced5c78464
MD5 543599d2ca352c98f24b367fed1efe87
SHA1 a478e6c9c448b507158198b2b9936c8fab198cdc
SHA512 ad6705236eebff2e182a7dc1a1163741962ca6d87e485663843a4badece80424fec831260826f95890b1d4663026198ec5646cb5c7b9ed813374627ec2a96147
SSDEEP 768:GHRXACTGqn4j/ADPN0Qo7pPg0gbCy6E9pvZwcWx83rmnbhaRbRkhQl6:HeR4bA7CVjgbZpP3Wk6b8ruT
TLSH
T1DF03F1AF2B7D6A752F2A9394013F0AF4D48DE01E3465A158A26721F97D2C8D7748B0DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 18KB
SHA256 0b0b6b9a609ad590b762f5387b6fe738f088f6de44958a2c18e83c4c77b2c293
MD5 a6de8aaa649b48de6f502e31325834e7
SHA1 094523471e301d68d7c5aa6f85b12bd22154c6bb
SHA512 543d04c961d729cf2c34eecbc9b693355de6c8d93f8db26ef34d078654f40ff616be52c81e63728cb9bd9753dc90c7a75942384d31a0b125bab64ce93a50be74
SSDEEP 384:MmB9mbq33F99Is4JqKH2G8FT1+5PkXUEmor8osrkK6oZKZUafA:M4mb2lCHb641kX7QosQ6KZlfA
TLSH
T11C82D0EE909B28E0633531993BFADAAD55F725E309917637C33993C1AE14F509E21B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 27KB
SHA256 a532ad904c3fec0d0f77cd275dce6fb52e352c68cfb8415b14534e9002c6cc71
MD5 e2a659dd5d5285babd4d0b6183cdee76
SHA1 0883761d419bcbd03eed3ede0e68d67ddb2c4047
SHA512 28c2b7c4ba1b86ba1ee2ebed272c26bc52173791fd5c73706038316233bb5fe81133d0ed31e79ced8c15796171c076f4b0115d010524bdf3280b96c7b445b6e1
SSDEEP 768:36YyRdUudXkVdKakI9rKLQeCyoLewGmTLlyUSHNlZr52kT:qYyRj0TPkI9rKsP/LetAMUSHbCkT
TLSH
T15AC2E1B6D28679ED15F5270F13761421B5EE8F7DB74C0CA4C5FA68A08401BD1B3C28A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 24KB
SHA256 c7f1ab381d3c6f0c52968d2d14278c0b107b53a5e154b7381d2a46590e7d33f0
MD5 8b62cb77af08af8a3c92a15d0534ad07
SHA1 a7d15c6d6a8177b229297c54df57bd344b794513
SHA512 3ecf677f8eff0dfd5920b9d2ab8b8de21f7eee62ab429a033b0fae624a6a88718e595a81bfb5dac841f1d67bef8f0d786ba57a5096327cf959689dcecd16a823
SSDEEP 384:ziHP8fq520czx05WRFDagKW0LGE5zX9twpBqNuCxQSBx7eh9nAj751HDdg8Y:zcEfmY02FDagn0n5rbwvCCCo9o51+R
TLSH
T151B2E17C040ADC4CF924AD5E751C3B7B29349AB31FB4A499841A1F09612A0EE1ECB1B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000aa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
Size 33KB
SHA256 adbeefda3faf8343688a1a8bfdf0650c6ab1fa8d0c0e700feafe2823c8c8bfbd
MD5 c156bfcf3b236bf2585193372e49e6d0
SHA1 53fb2107c580eb5e4d465025a445cfa36d0139fb
SHA512 ac8bfe49f6710257c3c10f9bdbcf62c2704b48d828ffa4a48e3e6d8a576b9cdb64ccfc94390b71ab25166a8ecad4d5c056ee8d844e43118654e75f31c7974baa
SSDEEP 768:NOSQYMEnbLedX5WfnaKB3neHLY6xcdB1bWn/IDcjuciyq7:NOELiX5WPRB381IBgnQ4KR7
TLSH
T1BAF2F29E7D004267BF74B58EE947D749014E32B2C07A6C94A0678FE2DA1C5FCBD0A90D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 69KB
SHA256 b8fe0523e265ef8969f5629adc26f5f32814629205b12f303ad837d854766728
MD5 51d1a839e420f9f01d1ddcc1ebc3ae0e
SHA1 1feee248204ff22383ae10d13ec89cdcccdee76b
SHA512 f3fbdaeccb2c16a71bd4e650858e2f1b831505bc11b7312443b4ddc21e2ded5a2a6baf34d3115c44dc150262ab683c0462c2c2c17e571abc957248895a66fef3
SSDEEP 1536:j820MmhAUFSmLOpWvgs3Tew74HQ8WbjTHJNksjqO8PEQXZXFG3NQW:BmhWpWz74nWbjLJGsjO987
TLSH
T1266302019EF1AE0A4923B756237FB1483D94D300219D61538D01FCBCB1AF9BEE657267
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
Size 21KB
SHA256 2acaec886d21bb834a3a775d1191bf06a0fd00c450592118f324a53cfbfaf617
MD5 41f3bfb83df08e44a4a7cde939cbe216
SHA1 616b8a938fe5692913501ea29889535edbbab957
SHA512 e264466ab0d125c4186ad333e5981dd4ae6bd6bf9cf7e0f7d6ce945ba20659216f3870fe48af8b26b5df94b3abe6dca0dc5007d2a30c65dfc3c48e8a9dd30767
SSDEEP 384:QZmkUmaKuSIJyqRRhWsHN5TveU2lAw8759MUm0ihXD3LDtVt1EXU7o9fK+j:QkkVaJ5IqRjWaPSTMujVD7DtVt+UM9ic
TLSH
T1F1A2D0F57D1792F5B55042A8E0F2B65ABFE0128D0F5A3651A1BA6984E620F361FB2028
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 39KB
SHA256 7eeb886d182a9b4872d3908cdc2b7d6debf044651e9e9f20ae0d47a99c94cc31
MD5 2ca5bcad18da3c3a0eb4165141b56afa
SHA1 88b7c0b8536fd886c8faecfd08a7829e017f3bf0
SHA512 1ab2c21a4f6f5ccb14ceae47b35e0bc8fe8cacf64eef49850c7a4168a27c60bd17ecc595365087d7d145f9112d14d1910e25e0798f4370e35e5b25f2d5546eff
SSDEEP 768:0Vo3LzQYfxtUhB0jUUuW1jWHpBCC/HCsRo//5/3YoXtWDFbGG+dq:+o7zQYpt+ZU1x6UCqEo//5vYUtWDFbKq
TLSH
T13003F18C3A6D0E16FF41336E2DA5A08B0AB189E655EDA2FEC0D1555D5F028BAC17304E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 42KB
SHA256 e332d5ccddae8ab59a45ea7ec14f535fcbe6bf5f84a62d298171b4dd2c897710
MD5 78aabd35cf86bd700d5787e6dabddf16
SHA1 f7b66f720c186cc9c5c160c37c1a5414555a472d
SHA512 5d3c5b6dc589ae88aa03cacc0e8ef780fcfec427efef086997bee89909e7ee681effaa097066fec36d868a64a1fd303038ed011b7ec8dab5829716d8434fb240
SSDEEP 768:heZP8ym3DbsmYp5D0RmKOgqL81zaXx6R/T08FxrZj8vSKj7cRK5LikcxWL9bfJX5:heZPybsmk5D0w8IkLp1YvSFaXRbfVtrj
TLSH
T1F313F1219FA15DEC4168A065FC803F47F1AEEE0085D4CC67358881C7BD298E61FD66BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 17KB
SHA256 bd777cabafd6cdfcf66cd8ffb921f2c554833b7dd9ffba0474fa6f6a78b977d0
MD5 314b2eebc8f3f1eead046a8ade0b92bf
SHA1 daabda4f5cde69e469bf98674a2c993b33faf94e
SHA512 48f34fe4b689a8de3c61e91d036b34076d7c3a9442b59ec70550a8863277a3bda71001f2f231c33a12ff0199af8e1ef00f4f3411fc10de9992d7ff08b42484ea
SSDEEP 384:EGGx0ZfRvnPP73tyLkozHumSGCxgvigVZN4FkzbE6NeV1:Ix09xrQLFzHJsuvB7EWeV1
TLSH
T18B82D024F983EBFC4F475302A6BE69425B9EE6259F01FB4093771B0B84E795A1A7E000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 16KB
SHA256 6bce2b0a299ef92c7a5400a70b99d8405f44b52a4a4682c2c54687bba43d9cf6
MD5 53739451e86054678d83436a85345d54
SHA1 42535a91b6b94e9b8c95f6fba210cc011dbe0283
SHA512 3d02f9286f45219eb44e059ea0c5a5e4371e059dc0056dc22e089a62e8833fc8b6a3347d14d061aa85ca507d829c914e2be9ff684813077269553a2b6acefb39
SSDEEP 384:ODiEFfZgMxw2O23SeJxo4PxR4Rc+65MoVrgpTCDhVC8Aq6x5MN:OtSMxO23Se7HJR4+Z5MaT56x5A
TLSH
T18C72F161BDF2C584C126FFED23DE024D93A60D1D0BE24900652366919BFAAEC5246EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 30KB
SHA256 be02e0203bf9bf2ea0dd0e19a1ac31ed7284ab82b2e157ed43c2b12fff0f6cd7
MD5 d81368f517869df89487d96d42746ba6
SHA1 022032d6ea12a52bc4102b99e8e82fd27e321f12
SHA512 d1a23b64150caea4d24080843d12d38a924e7339588313fa37cc2afe6a0bf135fa486d542be716234944747fddc05878210ea7815e3ae08bd064ba39539e35bc
SSDEEP 768:Fc0nYwvMD5JzqOq4OJrAkagvxAY2T5WTkDT:FtYVXWqOHvxG4kDT
TLSH
T1A2E2F1326F29FAC85C12D037E837366C9B3AEDC12FA894538454A543D9566FF74E18C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 25KB
SHA256 b5ff3123c34abe3052771852b4dcaa90711a7f34dd69fac9f9f7c1164f2581c8
MD5 f789716feb1d8945a2af76586cc08e55
SHA1 5e5860d4e3dca152f084c9ae5fe7d1f6a1c3ea96
SHA512 804d86030fa2dd0cb25ca0b99e31b6c4526c58a7b37807fd44a3b02b083869f618b3df0f547c036cc6271f4e7baf8773895fa2aa72b5a531c9e8f75255b19391
SSDEEP 768:kIWDCHq9o7IGvxgy2rNWIvra1wQ3Pd+lRO:VtKq1ZgJrNWITTLO
TLSH
T15EC2F1E08F3EF85F5B56EB78F7A4CA2CAB503DB235860185174D485ABD38F01D658CA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 30KB
SHA256 b08668e7dd7deb70851f49350266f197de11ec54e5d7d94db3062a5071b053f1
MD5 02c2dae8921f5931a8f8d834d0cdc400
SHA1 82075d9062d9ef1c331227df78b7308a3b14f2e6
SHA512 4cc9a083aad51d7c5614a82f7d3899c8570dbf8ade5c618255372f3218e05f3da7774496efcc626a1f9063bb3f08cc38ad136fae748f3b3b9bd0abd6e5b54df6
SSDEEP 768:guJnZzJYKEKIf0SStmFfDJx6DO/UUmaY4dYCkvys:V9tZw0hmFfDeDOcUmmY9ys
TLSH
T156E2F10310C4F9BEDE59C9E96DDB40B5D6094C5E17F88193053B1BB14B31A20EAA9BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 18KB
SHA256 ad2895e897b6c16771512ffa71833897b7f5f1d877ac4f5c966adf8772b5e0e3
MD5 a866eef7e8dd5754dffb17c0e25aabc0
SHA1 0c23c814887291b5d273070c44018596f5102fc6
SHA512 992c98ead81ff20c891e43d43215e93fb3d2b09761acc13baf999f416821525638b078f6cf4313d460d74ddcb4bb027d0a5ea49a70af8d09a104241887a04bd8
SSDEEP 384:DJbVz/pDYG8Qg7qGPD7unGtNjRM8oLLdG6INvSHN/czQNyf/h1n7loOA1:DJbV7gH7uG3lToLLEHNvSHR8syHTV4
TLSH
T16482E0848A6575417A5DF2CEC3469797E20C53BF2C7B8B65F9B1C00D5920CC842AB79F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
Size 56KB
SHA256 e37f100fc677d9b29ec6a9b870c3ad782ad5174557d9aedac05c5bb8c7273934
MD5 d65b35f032cf9f80df5c53f8204c930d
SHA1 e41a1ffcaf699abc84ef357733e6fc8b87c634d8
SHA512 78c67aa83216d554aedeb6ff6bedb808fba79c2fe148947a8c313f9e0b61304509dc4888f4f79a17fc8e310786dcb54213e0c1c0c95686efbca8d957aa34c68f
SSDEEP 768:GyVGe5uMS9U6jh1aQwGcpHPD2sq/JL0wEruyyKdTgVpHRCtlOOpQL7ymefuii:GyYe5K9lyQh0HisqB0layBd0nsOpeC
TLSH
T1CF4302E662823652DE89E637B3C481F40F1656C4D2E90564695FFD0F5139BAC068EFC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 155KB
SHA256 69765dd7e069aa2dcc799695738880aa95d8fbf243608b237a14aa1e63d0417c
MD5 b67fb03a286233355c0ba988e3c39aad
SHA1 b093ea2b013bd49d56e787489ba69dca0d51fdd5
SHA512 3d0f2df243f9ba601148a2e72d98fcef46dc20ad0ea0eceb958e6c0bb1af8d8cf853070f6267d75e5b42af9311e4c426815736c755fd124fc5bed77c3b0db9fa
SSDEEP 3072:G11/zmnq7KUJaNpUdr+TTpN60RsCJHfeMpI+jzNhl7xx:S137upUMl75J/ecj5Zx
TLSH
T1B1F31272C98621A09881B517F4FDC8851C7B94BB227B8D4C0A15AA33873C5D6F69F27D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
Size 57KB
SHA256 8ac0d7d9aa3247284605c5961da401128693170cd66e1546c2bd6e76acb62914
MD5 71b72955362147109dde37367ff2513d
SHA1 df8a2224e86d54933144a7b725e73d3935959948
SHA512 1a3544c94a33ecd4e51e48c20b0feffc02b12f09e6510110c4d8fbe9e73da9575c850e1a3d25be48caff6ce2b6e4b9dc40e8b827e4a8b17f949231a2abdf7375
SSDEEP 1536:DkR84mu+oMilQlld8b7asidgaztOuvuIf2:YRdmu+oTaPIvYg4cGne
TLSH
T1774312BC48A2E74D72490D3D42A8510B4F97F98F4ED600BD780CBD1B649AA780DBFC96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 79KB
SHA256 f7aa76f8c20464d50beb7a04afd63317c5104e1c22f780d4a59582399caf79f2
MD5 d21df2c5fa62d78128c7391314eed76a
SHA1 0aca02a890bc9fd9689eb8527bfb90659eef6dfb
SHA512 ae6ee68699110f686591ba902537d8f17b52edcd0721cba1868a2ecb7f8435ce75b634d34bc0cee4a15611c18ad74e57adff52b96d256834ffa8e859e2a29370
SSDEEP 1536:ruMrGU/fPMLsru5e+1/pa+U6wIzmFKuo2VJ11tejzuJOTPZqwzur+esTZ:ruoBfasqe+1xtzmYQpejzLPswzuVgZ
TLSH
T1E78312A496CD3F31ABF8E01E558BF3CD6E5BCE6B881253934DD934407A905A429894BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 16KB
SHA256 7f88b91ce949458c3ce11fc78de0b0ee1414756c45345f4ed86c5d6a2c4ad321
MD5 ded9f7018d82983e4b6f9bf9946dc582
SHA1 b5af1858347e0823dfd492bd88c9e6970f21c441
SHA512 6c20bced9825ccfd4fe62414ea469336b2ef0e1421ddd7fc25444be703aa490cb7ea4539b125a4640c9a08fa74291d527cd2990c763017ff53ad33912982b9a0
SSDEEP 384:dFcJUC21GDfxItqyqOJqnU3Oi01GbXlMvoMoUvZEVcF30N1xu:dOJU9axIt54GbXNUREiau
TLSH
T1EE72D05F3326EB40D39541242C02F1FA1E60DF3F760074A8B1647B8B7C5461A36F6A4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 20KB
SHA256 265afd4ba46ce0759d9694b15535a1ed11b5f3ad0e49767bab4b8ba1745bf461
MD5 fcb61fd14c6836ef46c6a81a25da9a0b
SHA1 4409eff1b1f829e26922f62866eb1143280e21e2
SHA512 186cdb0e040a9ac53397ffa4a7c93c3123ce2defa5b0dd4de5711b5640f00debfe8307b8089059b32f2d18b5573e6608df50121e1c9c2d610ceea9f966bf0909
SSDEEP 384:Dzw7CPbEVWHyQEGhFl/771IF7W1K3SX1dlkwaHoHBQKVxu:oOwVWSQR71IsK3y1dlkwaHohtxu
TLSH
T11A92D08846F2C84E056480BB576291CEAFDB57350ED037B61C33DB77D6679AA06B2C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
Size 32KB
SHA256 1415d0b65515e14ab4e8dd5d7f203e01000681e3373a5ab7f6e60e57a3b978d5
MD5 d9c51a4a6bf8b7237adc9a7e8f8bdbfd
SHA1 5e341646813707e03f00ea3baf0a30ea4116c86c
SHA512 204f2755801aa5a660deec49e6f9546c0111837b062612d3df4e0c3b5ad72731ef813fa9288cd1556f683421d75d974dd0fc80fdaf0dbd6b451ff4e648eb9012
SSDEEP 768:TO7sci9ExWyvQfazVlTo0ryGluv/CMgGIIiV37DEGdXPi9:TOE2WYQElTo5GIXcGa7DEGdXP8
TLSH
T1C4E2F210D1D2346C37203AE94F4026E6FC09B05CF055D96984AAC748A50AF5F4B7AAEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
Size 27KB
SHA256 e4cd26e3f3569f684e4775ebd35e44cebb9cc1e4989adc55cc33244dc93197ab
MD5 a0dac482aa4bc265f23a4bf4a5534416
SHA1 5c056f9e79c25af744236a15129f0b7a139cfc12
SHA512 ca6ad779fe946498d47cee3634f8b318383a24ccc4c11c2ee0134432c459787ba3f1bcd31b991cb2f46af49c8221862343684428aff4c076c598319a1702adf7
SSDEEP 768:8AiLrL2q/5DOlC4DEwQhImX1ssQalS9Li:8lXLHxDyC4DEN2gSRi
TLSH
T142D2E1B9B355CE41B4098D56A39BE56FDEB2CA5B30E0DA40250B3F8FE4F3904E1A6425
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 20KB
SHA256 f083c71c5c6b8409e97d2120b407f6186564c583f08ee39d99133e8cfa41eb24
MD5 3d0db08f2a5315d0a020acc5a46f5f16
SHA1 1cca15c7ab4355dcc86a384a7c6c62f639b0b662
SHA512 6977c99f87bc661215efe63076414dbded322efe6e30eed1629e7394ba799e477c520f84067fa2d9e1cfadb3ed9a10f9f41e35203e281fb30fef737648d1d66f
SSDEEP 384:mJ64jLzfdCcljj21mXgG0vk5P0L7UAAxAHkz491uGWmLa1NF+c0hzRpr5ZCxWXh+:mY4jLzjjlwG0vk5QSxdGWfic0hzRB5Z6
TLSH
T1A792D0CB2156B11486F20AC6B15C9C597FCC2D1E76D4BE382C73832D5879FD94891E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 25KB
SHA256 4d6353248d2e8a66757fa400ee26cc2396e3b7ee3945f462c4561bc19e35fbe1
MD5 72b5ee6ad4fb0bb45f39efaf1ae164f8
SHA1 636749c6b4fa3695cd069dbae9de7f3a8086f634
SHA512 d0bb013a6d6f1a937cc26024362105bb57c1ac558b833f090c7c8bc31f62bce1dca85cfc2a47d30e964e6434366d302f57721728e5649a070e2f79698a3d8ff0
SSDEEP 768:31a/zYJHIVMDwWfJC27rRcLCOZZxKnYVXvWF:3k7YNIVKzfU0r2GePKYVuF
TLSH
T1E6C2E0F6EE360461D3FD1013EDFE51326ECDE728833909A8389592A937876293C55CE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 29KB
SHA256 2a0708be69d8a818b02561e13d624399f11f2fa851de7f651bbc27e1574f7574
MD5 e5dd8dd304fc932dffee712576231025
SHA1 50bc9c847e90e15dc1ab6aea9cc541a53c6e00d3
SHA512 1358fce34a578fc974bdfaf7ec5d74355faa8cedd148b8568b940117ec830d876f27a13487b872fbae27bf34dcc65b6d8db7e7cfe45cd0672acf186e9e9a42cf
SSDEEP 768:0Q0s6c6ZUzt7P6HFxnhYrCnD63e7YNE10wgCtgw2MAIHiLswUUEd0ki:RT6ZUZP8FxnhBnDL7sTwsw2MAIHiLsv6
TLSH
T186D2E1656968ED600C00684BADA34547F302873FC5BCBEDAAFE0A02EF1ADD6145E15FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 55KB
SHA256 7a8cd0295f8036baddeda1663e843612e095daff7effa2c1ba21958ac77c3a84
MD5 5d1e98adc8bfeac0d7d6989903ae3e15
SHA1 29058692236832ec879f78310767b8d099efc2df
SHA512 620e4a821faa32657b602ec6dbe6d0864dac2051caaecef3d750aecda8b6ef6b006fc39b6de5b44bf742abf60205353bb020a7aff37a2dc3668ddbeee3aaaa67
SSDEEP 768:LMcdKuDp07/nycbSwhE1v7lTdV2s+LkMg8Fy3i+0b8Ip+ky2sUspqOehewqC+Ox:ocxp07/nyKEtd+U8Fj1bjp+ky2sUjp
TLSH
T1C44302D7A71F467D46A6CC2726F831212AB3BCE22D7D90C392590758D72325B438B39B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 132KB
SHA256 2b7a0c66ca4cb42691740d11676ce1326ef9d512621baeaff491bd0caf38e72c
MD5 156fed9bdd87aa6ba1d0af6ab0257c03
SHA1 f885d08806a2b55aac6cf598a85fa08dc57f190a
SHA512 4928db61dd83275083fcd755ca3dd21834b2e7d4d4ee4c4e22e4ba416d11d63202364cf8f6f19779c39cde7d73c5a83fcf90f8ddd20ce437dc66d5428890ee8e
SSDEEP 3072:90IY8cBxF2Ucg+tVYmsJAzSZ9ThyTa9CBR9jl9+hbAGQD4:GVfcgcP5SZ1hyTaSzeMZ4
TLSH
T139D312A0F8D1C469FA6DE34F170AB2C5931F61963B1D6A701A880E9DB24D074B61BFD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 17KB
SHA256 0cd49e43a8ad9dccec6bb0ec25f2eb7c81157bf20227b947c1d704991772ff5a
MD5 299bd4976e145652902b236ffb6bd82a
SHA1 09b1b45403d7adfc4cca576921ab905b210a36d1
SHA512 1bda47792548ebd810ba05de6e23709fc3ea618f5f56e8dcab7f01491071a49da7555dca9f2c208f4326a807ec83a95a8dc8c27019aa85ab72361121b88d7c9b
SSDEEP 384:G/HFoLHKmqHc4Noj3b2RUPkFLj4MW9DrUeJad5+wSgr/YPAO19Aa3pu:G/UFh3b2RUPklj/qfUDdQwSenO1ma3pu
TLSH
T1AE82C088C7657E41BAD22CAA8C3580FD47B9CE898B3C3D8485F81AEC19B11D55637E0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
Size 60KB
SHA256 d0f71573bc44a3146e2db2343b775d40cb712520e7f3029d94fb70119783ce0d
MD5 b7e355547c90f7ae9c7449739ef045c9
SHA1 c1422e463b746e76c94b0dc64db3e26dac250647
SHA512 51a20c8f16e4e373c9dbe47e07cf71495d48589f5ba237700bdc23a8ef98241ff325aac38dc43f8cbdd6439fbe67c9fcf7c4c845c1880b3531ec2f0ef60b0019
SSDEEP 1536:ZA+TJApxxfjup+n4UM5hn+rg8NMlS+CIIIHrdYiQJS1:q+TJUXyC4UM5p+rSlS+CZOrdbQJS1
TLSH
T13653018A7B41EBF2485E37A919FFBEC233352986BDA00366583B519D8BC37479B4C140
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 44KB
SHA256 554767c98d91d1366c4d0955bd15f74bcc30ff87a309e76ce79bc91b32ee49b2
MD5 539a7a72588ccddb91f1c7312441ca6e
SHA1 4e1704e3fb72664d575cc97966667f5dea894ff3
SHA512 66d44cc0d1d8a5bf39be0a71078ff1c54f7404b49ab3d1f765001a292cb46c04ca75fb828a60feaf3c50b7e971e457d24746dce647fdbba9988b73d30bf46f22
SSDEEP 768:BfSHiZDE0U+1bnjkxAuoqYMdTxuECrcMp1k1aGfLJebME+ysmtwD3eIryGNH5K3x:6YDE0U+1Ma7MdsBc2C1aYFE+y/gOIrlw
TLSH
T17823F116503963BC7B5AB41515F0CA3B8D943CD3A213FE7C26672EA44A7483D3A36ED8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
Size 34KB
SHA256 e85ad0655d2a61c4691083145a1238a6c2d121cd66597e1727e050361fad8e7f
MD5 c768b3f56e9b78059977a1675dd0174a
SHA1 6104b12a5e6bed2327f5f5067c119cdde5a23c5c
SHA512 e3741f2a3f27c3327743b8c223843290a2009a26a44d2fc4859d1a187d1fbda203d5451e832d771fb0ce41d7748c7efda8986052fc412d7efc11f1ba4e1c2e77
SSDEEP 768:dp3ARALOuHbnsCDT5W/CpaN5/FzKYK8xmqFpq+X4bbyYX3wPbm5:dphLOEnJDEqpOVFtxmqFpq+X4b1X3wi5
TLSH
T118F2F2530547BC091F615501D35B883C6E0368CC731F989DFE9AEA2D23F39A766A864A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f9
Size 22KB
SHA256 8a29164c52109a487957feb42433363ce62bd7b17c7ccec1f0225b7e9bad3c84
MD5 068c56b4c35d467bbeafff035f15c901
SHA1 f0e68c98db14d2838adff93e862cff1e680f19f4
SHA512 aa0af9450f89292b506c00326ee3c4072194ec8cd810b330b4731d3055232cffc0eeeb164d887e39198c60a3238a5a52f032116e1b8253fe38ca6b79f324e3f7
SSDEEP 384:0huQcxgXVqcsR+C5KTP8KWL/GgssK0pgD9cn3LlpoWROY1vCLkafCfds9tVYsXac:0h4gDsR+C5c7WLugssK0pg5O3DoslJCn
TLSH
T1EBA2F15650923A9F784B2544A1F5303E3F1B94CADDD49013AAF79A20E9F3CB0F65D8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000100

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000100
Size 62KB
SHA256 a91ef436af66efe7bb20e988c5a4a0706b720fef08ae063e6e7dcfdb1c618652
MD5 290af4900bc9fa1a8532cef99b01241d
SHA1 61f5fca4bb212ddc98a3024ce9e7a2922684396b
SHA512 fad52e98ee41508001cb127c5564dde0a7e4a0072c56befa2440d9d712c34ad45629b048b2a8bffc400e7cf57a22b3c40c98b306df7f0de8152bfac1ab96ae73
SSDEEP 1536:8qfu53JVUmZ2eA5MI2bQN8sRthh1PcYWJs:8qI37bBAfSQ5Nh1kYT
TLSH
T1F35302E75C1430906FFEFFA14F86D85049775914A0987B8B11272F339DAB0FA74D88A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000101

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101
Size 31KB
SHA256 778049aa58e82be408431e754ff9419a35a22ecf87f3053a2e1698c2b89e6bea
MD5 05dcdfce442e28bf8f3479c0d86d1bad
SHA1 deb195254a636b09edcb4e1a68701d4ffe7b08e3
SHA512 d3f59c1ab783e8566a9119668e9d6e0dac47c7637c1ace288d3d569f2bbac917a0ac3aa28938e57e948594bb4aee293ee62d44e531f939044c9cfaf48c071c9a
SSDEEP 768:6Gh+tq1WZLg/h+Cs9pBUddjPQWwpNhbPBl/CHQwntsIIJnEgl:6GhKq1WZ0pMpBUbQFpNhbPBlqHQ2Imgl
TLSH
T141E2F24108159EF1FB6ACC05679C5D3EEAE8F200F9D968F8807EA3B4AD66F02365341D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000102

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
Size 21KB
SHA256 cd5c3999d7d153b7b8e1a2effd1dd354ddebbf9c3974b8063e6429ef479c6972
MD5 484fcc38f9b75715d8be172de22421be
SHA1 08855b74ef006dc76b4163c833f40451e11a36de
SHA512 806be7ca2beb27ec54d30a2142f3b89abda341e703c335f3c0096c0b8e4160388d5841e71e6f9f0eab53a70a1fc0f6fe6933ba3fa0970a20d5a835259b252e31
SSDEEP 384:SNscoqwsdhvFdy7BDe9pk88eVL7MFEQpwsioMQuSmPTHefTSoNpLg:bTelvABDe9pk8zVLgEQyHvvbHerZNhg
TLSH
T164A2D122B93C414615F2C3E4334F82CBAD84D826EECE767F49EA93901D8C6AB535D457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000103

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000103
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000105

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000105
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000107

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000107
Size 16KB
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
SSDEEP 384:XQrDFyKFRXQQ5pGG913BahobGGOal+0HuXpAWBY:grxyUKQ53pdbGg47PY
TLSH
T11D72D0D62F2702F608F294202ECD392C679D7A25F77E6625F0659C860D58EB0D8F4F52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010b
Size 35KB
SHA256 57ad3bc69c218a19cc3f44dde72302f0c9731f36fdc0d3f8ec3e781925b529ed
MD5 070d7d3386c1c8c50764eef60a294de6
SHA1 d2ecb8d07341b919ef86416d2d89c8c7e4659b75
SHA512 9921b6139eeb7ed515a3de9e62882a6c3d26b3b87c9330985f33ddaec02d8877ced0f61a0df5c0184c65506980eab74c53354f23bdb823e7dda5c846c71ff11c
SSDEEP 768:xWZEZmISDMaa3XrrkytF16QDZ8pZC/71aU6q1FryHd4C:xWOZmIOG33kUF16xpZIav0F1C
TLSH
T156F2F15D6E5FDFB2A2C0F802F0B2042D43C219B456E287ED6602773B1DB8C99B650FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010e
Size 59KB
SHA256 94cbfe216ff5a1acee212eacbaffddc4becd52544df9bb6f99e9487fb3244d1c
MD5 a16399ff963fcf04c2d92db4ef33f888
SHA1 625ef6037986ef4cdf3b0c5446cf17a68b4264b0
SHA512 0dc08cd3555affc0e82a1ae6e960ac857660871155ac94e30392510fafcf08be7734d995177a2690f18ef6d716f2d477aebdc5a00934ee22af0ae86dc6ba577f
SSDEEP 1536:J5aqYLLivKKznqI6Qzms7I9uhqP/VDdDcldYMh3ZuzxGA:JiLuvKKznqI6QzmEiuqHVDdYc8A
TLSH
T13A5302CD71376D96C0ADD447E3B9A41E34A252A9727C2B61B8AC0CFED8F5DC70A84364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010f
Size 21KB
SHA256 5049b5754cdb850788622de1676f8993a4e4ee6c4d96fdb8093332f20c10b169
MD5 618dbf74a30d774985245618b0340789
SHA1 8c00c146d77574f85edd50acfa93a01407ca0d3a
SHA512 319a694bb9f6524045dec79fc00aaa28c051fcce876ac0213a07080ea3d66bb1e07da058db8fb9f620f01e07224247ec6462ee1947aea38fec475ee58b25ba17
SSDEEP 384:2mZVA0OKJPXqfxeX1ME6Oi0s8MZx3vV3IY/hdrIatLuNbAu2/6Ef0v6XOwL:2mZgKhafEXtJ+tx3eaZuNpKZ0CXpL
TLSH
T15BA2E1CB10758865DC1356087D92F5D0F6024E08B618A82FB59AF8478DDCFBB2BDDC5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000112

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000112
Size 41KB
SHA256 6b23e94dfa260fe97e76f3c1c043a5186edb3d0990e78e2e8a56b5583c202320
MD5 064cd8518b3757e0274912a1150013bf
SHA1 46c101f4a2c40433de86ff94f7777d879c5b530f
SHA512 42d13a8ac565c5504b4c6af1a65c66a1a4773e3f9ef461e04505f17665b833532e14831ceb49a0d5b3c6009149d7ad3017657cb9d80ae566d50ad39610e78e7c
SSDEEP 768:kY1YXBl/VYmgSpiiHRXlSATpSeX4lxn8r61vKyJUlrd6mcxRsFBgNceWtE:FYXBl/iNSpicXS72r61Hyrwmcxe3XE
TLSH
T1FC13F1C876FAF16CC60E1DBB278B97DAD737D895B4D14E34678A9F1CAA19C0188C00D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000113

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000113
Size 23KB
SHA256 06df011163bc2147a0b8dbf5d412f24bfe7ebaaa1654a2d4ac2c68cc71373ddd
MD5 8bb0a6e91cbcf4aca9c691e9225b34a8
SHA1 83d921cf6e8334253aded6cd30ffb5781cf3c0cb
SHA512 27341610b65afd4d53f905989de533c340b3ea3b5da82463206e62e0880556786ae618459e06c9b24d43be73f59b7e5b68a85dd80ea52685fe18dc6b436e4cc4
SSDEEP 384:/nOQL4sw+FG7jQNqGsNiCUKXBAmIswDMQYU6KziRedelC96ajS+yDyQTdV/:fOQL4sdFgENqGsgC1AnZYmORe68z3Kdd
TLSH
T1E7B2E091FDD3B1DFA6A58562FCB250E28E600C3C8EFE454CF82A82505FDD0A60D609B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000114

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000114
Size 16KB
SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
MD5 6d6500d74bdb62d26f489953a29a4806
SHA1 78ad9cb6440f40f2f423010ba750300cada596ae
SHA512 1408a622d07e454e07218b65119011f0909992c8f25bc39c9030324ebf395aa9525e54024d9406597243b63deeab0d7f4f67f88c1603ced1d6238036cbbc2181
SSDEEP 384:MOoJ0OpqyxAT0/k8NaYiTSSkvu75hjBSk1yWosD7FYozHKjb:ZORpNibpTSSkQQOF7FYoob
TLSH
T16472D07E24761178DF9BDEE71B6B721374A50E2B073EB07292BD245A055C709320A768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000115

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000115
Size 18KB
SHA256 adb8949e4b3ef7657771e33c93acac92c8fdda08304ad8ae83c5361534929750
MD5 475a5f25cb5f54fe8aec9f25232e512f
SHA1 58bc0d83a2a35fa4f5bdb430cad1e9db2f34b307
SHA512 7317fbe42f15088882e6da4f6948a680a199b86e510f74e9ee63291c77e18f335056fa7c7659d18966aaba12700a6e042bee34f8337b369babf4d63543d316c7
SSDEEP 384:OhBHx7qX6UGYWFblTghZjbfXxZspZoUT2gvkaPEe7z2:m7hUGFblTgHbfOZhTdvkase7y
TLSH
T1CB82E044B70A771BD10E8F3B8EE36A4EA94B9F6C321D599C9018F5181EC1A94453EF36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000118

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000118
Size 23KB
SHA256 941843f8433cb7cbf5b3397cd680ddfe4859463d6b8a765a6c8f04bcaccb6934
MD5 500179b7738506bd0c52d1b4008f0a5d
SHA1 6b5c27608791f781632ae86e46777dff8a7ac139
SHA512 b10300db21f13bbc0cea4826378e770cdc39778cdec1d212031cfa4044f28d4045a89cff6c78db85de7c8d683748ac84bfe4a45a0fe9f3536fde3b21552022c1
SSDEEP 384:WMMDQoXNpgQtgj43+Efb356PP3ck3oBf10Iuv2/oVVXvmZD9hS0BI7eLyzhb:7EBcvjm+0IPP38BfE2/o/qDTS0BI6L8b
TLSH
T11DB2F151E46519B41207AFC0EFB07F66F176B5AB289C4A576B92D10C84BB2337FA01F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011c
Size 29KB
SHA256 d9f20c980120d86941623ecb4335442f89d3e2982a0bde7a87833232a2956b85
MD5 9e23e5981e5e8afa9795e1f72a98b4b3
SHA1 e2d8c0a492fe6bf743b1050096e1699bfd50d2d2
SHA512 3bf3a5dc6543053ac47124597670930548aba21b6b8b0e78b7ed6a2cf8e78b8f84336dc8ae6c360343a01fcfed1c630ce7ad7cf3fea15f32dc8bd8e265fa2733
SSDEEP 768:IRjyqLkFxfbWifeubWFGg6JVBDWEqCIzbD2xuhkQquTHJ:IpDwFh/2u6GvPx9jI/DxKuF
TLSH
T1B6D2E1382B3EE1C4F8DBC6EE0444CEDD39C320E9649E4F5901347E7A1070A845B5DABA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000122

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000122
Size 17KB
SHA256 929c446805575e399ff7d6880544b408f5923fe1dc1667f5b6531d09bf5b9476
MD5 c3487fd31aa7061b3d60cdeb6d3f98ef
SHA1 707e706f27dcf7f0158c7384c1644a6759e2936d
SHA512 bbb97aec314350f592ed8d727f6fb562d84653d36cdbf597d886db89eb99321b32eea357214ce1be1226d6d951f92ffc81584543d92c45e657e0480642017937
SSDEEP 384:/WARQaJRwHUpBWrvrMrlEi5TwDSV+HvexiZ7Eaohnd85O+x0W:eAnJRFpBE4rlEiaGQuGBohd85Xx3
TLSH
T1D772D092874ADBDDFB269E467BE8F4C75791AB35833275360A0D872916500F1BA0FCD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000142

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000142
Size 17KB
SHA256 91985b919571f35b090fc58adba2ade74333a59e809ce64c638384fab730a78b
MD5 eb02c1fc545a821ba59e6d05ba3d0408
SHA1 848b9c8e4847a417bfe9fbcd6f751a13418ad18e
SHA512 e3475ebca1a89b0fcd29e60da5ffd41ba4af120a68898d646790ae42aafa0b89506b6d91fdafc24d75ed0c5b20a9b6776a39397f7b43849bb8e3c187c132deaa
SSDEEP 384:/JIw6YTmil2pqAxc9gG/gzpAiTbR1KfRehYDtY:R8YDTAxcWBzzbbhYDO
TLSH
T18472D0EE983BFB076164DDE83E7D424A47026AE2F90D4DEB0F8284D8C91EC8168D59D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000171

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000171
Size 3.0MB
SHA256 b623f63699fe21084b69830b890c70f6030e0be9773c8c763e9636cd14034bfb
MD5 6dde82874ab5d9af59e8bb6ae5728eea
SHA1 93575f64ff6e29ac3cbfb3486499d8f01441e61d
SHA512 f45a486421f47142ca8543d7677ea84d72cb30082745505884dc29a8a5ae6b8ac7519a5c6d7d913fed2621ad89cf1f014ae2cc2d12eeb8f1e33501306e28c345
SSDEEP 49152:bTgFJ7qpoYmJb9p0E7XHyyEIBgYIfEgyrhUpsIBCr02P:3oYmJb9p0E7XHyyEIBgYIy
TLSH
T1C6E5E6A4E86951332171ADF0D37E8867F31401437E11C4297FEFE5BDAC9A910EA4AE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000174

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000174
Size 1.8MB
SHA256 3f8a412ceb42edf12829db27c89545b50d28a652e7b1a0c74e4961c20a1ee780
MD5 3a91dbc38734d2e33e99d2f0c12d7adb
SHA1 0312cb11ab4bf43e2d875d4a1f05b7ea28be97d6
SHA512 2176adc022b627183d170d7875d28c63e12d7aa4a2778dcbf509964298c998c84abdfe50a49b02a9d0317b3f0a47f6b0ecbe9de826954eab9b6572168d5a2d44
SSDEEP 49152:zJYr7xl3fMPS7Kx8ugf+lyZs0n7KPAWA4ezKPYaXFYi:VExJfMPd82M7snszQd
TLSH
T1D58533342F49643B61FA9B952AAD47237446984393C0A0F6BD0FF1B9D3CD3F9466B160
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a5
Size 56KB
SHA256 5de5b36c5940f7cbb68fdd5d003142ce3cf15cced79e3548cb5f5fdeeedc6f8d
MD5 0dee7621487a97b10956e3dc19a312a1
SHA1 b028fd7bf313f0a975fc13d9fc43c6869b797154
SHA512 7e0ed4948987780d9dc656520ddeda09dbd42757f2ba4f74de2aadc0f6162d8100bc00449c57878990a3b50072fc495c46f8188c258772dbefa11b4cef83ae61
SSDEEP 768:87wUuPe7SpF925AxCfVvXT2KU7Uun9vb9vORvfZYcFbwX7fhog9bAdEA+kkjf88p:gpUnwRX6LUxFbwXrTiAkkjf882c
TLSH
T1064302CA072FBF9647C1A74507D025E1172E6401520D13EEEFDB4E9DD91B6A394172DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001ab
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001df

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001df
Size 62KB
SHA256 e96962c7df63a9fbe00dddda6e5360d639e7b25498fef7400fe0333fa5311294
MD5 5bbcb2d4f3b68ad1969574166cbf7210
SHA1 c1659c4e5b88de42858857ebffd3accaa360b02e
SHA512 71f65503cd3f12f908644cc2fecc7b5e833724c93107962935a74eef4d8eab2806200cf291d366c646f5d0f881e27f9252b7c1a39050eaf4388c7ec474ddca74
SSDEEP 768:GlmILj20bh/Jhu51KNCCcwgjjp1X3xRTFo8OmY1gqNjbBSxY45QY6FP5vv2Mvc/r:Gt7/ju35wgjjLrrqdb4xn5Vs57vcV+FY
TLSH
T1B553020A009EC47EE703DDA03087145E5FA508BAEFF5E3B9B012597B82667DAD75806E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0cd1b5b8efdaf465_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0cd1b5b8efdaf465_0
Size 3KB
SHA256 d97fcc6c4ccfddafcb3b3a95628f7f1ddc96b537ef7741d988288e9a6d5c6c93
MD5 56acc0e2d260285cd155babe4ff00e96
SHA1 a799bef256254de321de9d21b7cd25c3f37a5d3a
SHA512 f213e8a23b2c193b3be89ee0fbfc5d121cb4924f2e70fd06e20de6b7fc796440dfcb3af90ced8835aca897d883f1a7f64462871bf134290b0a4beca0f9bdb6cd
TLSH
T1997196EAA344961DCB3293F912939626733681087ED3872350C1FB722D842F7799ED4D
MD5 SHA1 SHA512 TLSH

Submit Download

1ad94f369061a62a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ad94f369061a62a_0
Size 468KB
SHA256 2b964c3122f23c1ccf994b0fed67e76631177fd2b17db47f4719dad3a4bd562c
MD5 0f0e2c9221b099f699f529be52e57fba
SHA1 65eb8caaf6d677284e330546ffc2c4a0f4f1bea3
SHA512 eed9f9265748dff05102a4115779a794379049f0fedf078a4086e5f5c731f6f3c957e9c1b3e5f57b5969fb1349bb8a5406f6ebb62b6b1556617e4b57acefdbc3
SSDEEP 6144:BBp8+SlcBiGBdBVNJvEtbTOpoI+/sfN9fbCoY6PK6jjNx8PrEbHAem53bYY1nMEO:WBm7QTOpoIVfJt9TWkExY
TLSH
T1C2A4B6146792AA77CF2657F552A2891B7236414C3FD7D20226E0A7353C393EBCE5AC0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24a65bdb61b195b9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\24a65bdb61b195b9_0
Size 295B
SHA256 d2c87ab4a9c145aa9b34b8ed11687dc070e39363b013876dee060dd3bad4d3ad
MD5 82e0d920ed3c2c35bbc14d47c9fa704f
SHA1 a3558a919fa7244afbb8d52d9dac8d0a6a7bfde5
SHA512 3af01accbe36e1ed2353ec2fba853610f2ec46316b4ed09b536b36cd0c62e4ed1ee4c5e758f62b18a35652dfd906b2060f31720ebe59c678f49decaa6134356b
TLSH
T1E2E072F36000A400C67AE8F6CAFA112A921B00C44CA9EAA8A01544A233843B8B3CE2A0
MD5 SHA1 SHA512 TLSH

Submit Download

336a68eaaf209f48_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0
Size 309B
SHA256 5ea0ac75f856a27321eae4d8a4f78ddd109b8b4a76f235eb114f2301d9684627
MD5 871e0f7dac5745f5c782639eb19d0fc1
SHA1 90b2ab3030f3043c68d9e8b7d4ca18ef950444ef
SHA512 09e20057b01d2adb47d34d97d2d4e316f0cda2e3e545c0aabf6b10aa54aee68daf03ac06f5a718f3116a4ff4fc953b9692d8551f48809c94b623f83ad83430fd
TLSH
T123E0E7F310481193D27B4EF156D413BD413350EC2CCEDD9D1044604115635E193C5071
MD5 SHA1 SHA512 TLSH

Submit Download

6959cd335d1dbf9d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6959cd335d1dbf9d_0
Size 263B
SHA256 a1d93073a9d091a674a5cd88e2f76c9282a63ccb85a6002b81ce6262cde8b592
MD5 58436ac74af96b1a4f80790b71f7f686
SHA1 d404eed7b00d3a5040adb1dec7c1f947b77d8b7a
SHA512 1dda66144e2bb4efe97a3515d852cc0ea8c954de4664367211180aa5f93f679c7ef4256fa05f88abf7e4c9acb24d0649eef851c4f0707b0755980cdb42025769
TLSH
T15AD097E384282C04F8D575F8CEAF23CD8783AE208E6A42E1C00600AAC273E304B8A485
MD5 SHA1 SHA512 TLSH

Submit Download

710130a38f138c3a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\710130a38f138c3a_0
Size 178KB
SHA256 efd401b9e984ef6a2b5121f8fc221cce3ca6321c10276eae1e015d4526282933
MD5 ed6fd5af825f7c452b187ceac15ee92c
SHA1 6bdd30da11b17a650ac1b44994f2d298c8c47f85
SHA512 b10ea868ccb4974c4060765e78de58c9c4fc53a7eb0a593c05c093b1ad05e83690fbc72236c2a1e732425aeb782d87fc05bf20bf5df1c7bdc3a3eb68f7bc050c
SSDEEP 3072:H+GRPxQ7qOc9Q1Ofn+9tEKm4+zPCbc+q:eOyHBEf+64+zO
TLSH
T19104C751A7A1BB37CF6793F5129289277A36414C3FD7D20326E0A3361C2A3E74D5AC4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a02aa59ff61288b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a02aa59ff61288b_0
Size 269B
SHA256 9390311486fdbe7a386771405675d61cd8c52fd3381262536b53a2f7be404bbf
MD5 0a7cfd3ccaeaacdbbfd235f1a9f5571b
SHA1 e292133bda8a0c515645035eff00d55c30b77fa8
SHA512 2d1bdcb9536f3eb795c05131708e6ce69d26b5c5045b6442e9279fe4b49471a329356a6ffa494718de6e270e1f3d494b3b5c0301709c3ce97281888783e152c7
TLSH
T1B6D095F705013000ED55C772C5B367E99337704E4DDC64A01003FE6517514F1605F639
MD5 SHA1 SHA512 TLSH

Submit Download

9e772b51fb0b2671_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e772b51fb0b2671_0
Size 279B
SHA256 75efe8e282d60c286c99d1551a6a4c6aef8b25668b1c78925d30a01a8d359c46
MD5 bbf4eaa355de94cc931159b9cbe67e42
SHA1 abe2d9872f8410849ee7a5ace566c1b9fb608430
SHA512 681b66a55688ca21937b02b02e59671f8caf28e9f5a58913290963b407d6c6c713eb6106b3154aa65ebfe3e86adfc783c7001124c2417a93bcf5fa88f8837029
TLSH
T16DD02BF304644404D41675F0C2BE3289CE1B807A1C4888A5425041A6731C8352A92564
MD5 SHA1 SHA512 TLSH

Submit Download

b70f3c322c56bed2_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b70f3c322c56bed2_0
Size 96KB
SHA256 b6b8119253d10081241ca93dd34683da8bbe1a4672ec29c7f4713859a8b6666c
MD5 b44efc519feefd0a2086f1530b7686e2
SHA1 05cf0c31370af62c26b459d08d1e33439741807a
SHA512 d4c925442affc5877af26fa0bbb98fb5dfc827356f8bcd0ee7d9ff224c006398678df8bd509c220a201b32a572fb3da7a55b9f088014f1f560485ec278114fce
SSDEEP 1536:rPDNFxdtecXAZ9JrlTGYEOheLdeYPFh9IcpxXMS2VDbWQtQQ14XZs2+tW+A7QN3T:tPdoF9ZGYEceL1yRWQOQ268+AKZo
TLSH
T105A328052361FC69CE6697FA81A3895B733541483EC3D71B26A473256C263EF4D8EA0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb8630aa5dee971a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cb8630aa5dee971a_0
Size 282KB
SHA256 ce9fc7e2039ccef1166dd1e9eb0cdf8e3aade8f680c2ff725f7c6a0efa286524
MD5 f091ccb60834dbf57b6460c10b713c7e
SHA1 130919d9b1a24b46284076d683ab9a5246f8a0bf
SHA512 5b07efd9ef8e541bc83534c93edbf829a703c266ce178099b7bd3a16529e7cabc2bd615f6618aabb74365b1013cc70736b11bf4299a5fadddc19691b780204c5
SSDEEP 6144:myMauXaPayXidiM6gyiY/XwWN/rmcqju0DRhLx:cFsSd1kFNqc8T
TLSH
T16154D854AB826E3FCF1293F542628E17B737819C2F97B30766E097352C242D68E56C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce846c7153ac7d1c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ce846c7153ac7d1c_0
Size 303B
SHA256 eef2e9d8422023effa3711e883b43400c8d9b7dec2b9e2e5cb3f113c29df78c6
MD5 8268b253906210124d02fe5903b7e592
SHA1 0d4f0cc46cd7aec35e4521345f37a68b61be7948
SHA512 85e847ebf2ae76a519e0199c5602b4b63dd701b45f3000a056585879644205ff765470eea6a1f6e22a5afd5cd8c5dfc907116f7d694fdf131ad96ebb3ee4c01e
TLSH
T1EEE0728300CD6831D20A6BB4A723105FCA2208240C9DC100828780FBAA825D12AEDE0F
MD5 SHA1 SHA512 TLSH

Submit Download

daf13bfeca33e93a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daf13bfeca33e93a_0
Size 316B
SHA256 7bd54370307a5f1d0267a7961ca7c9e8afd0fad419e5e3dc8be217d0dadaf61d
MD5 15cf96bb6290b3e6297650bfae146e8e
SHA1 1e2c3853b0f60d126ec5cba03aaf2c26e392ed23
SHA512 0a95fba6c4f0b5278941a31c2adab4d9f28c5d804e8e823cfa7fb4a3d219aa8ddc2fdec718dae556c523f74617b0594df8b02295161c45d3459a75d095b55cc0
TLSH
T1DBE07DF370412000C57DC1F0C5ED2257475751C80C91B1F8D04160652348BF57646200
MD5 SHA1 SHA512 TLSH

Submit Download

e0aaaf5158c8ae03_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e0aaaf5158c8ae03_0
Size 54KB
SHA256 3a22add35bce446d656ba5c2509f95542d66727be846b7f63cdab2ff6679067e
MD5 da49d9bf15bd274e2d8fa9fbfb0dd375
SHA1 4a047b808fdef391e9e1e56d98f3c998e4fcc015
SHA512 aff528a61f4a7d429fb7c00db04cc21e9cbf4b209091b123b7a25f9dab6a2359cd1ff94069dfb8e4767c04434f36b97718ad1acf5ce9312662bc2542e1c3fc84
SSDEEP 768:898D3hNnVcH91Blf3aPuvCLjc/yOwsUuU33BMEhw4+3Tcvk0ggJSztYK4:w8r7nVWflvHaEKltxGyOTJcJWtYK4
TLSH
T12143A615AB91AB3ACF3A53F54267CA677332814C3ED7C22335F0A3252C652F64E59C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e11e46468952ef5a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e11e46468952ef5a_0
Size 10KB
SHA256 75bb285fac8a1b1ef21a2808b3bf3275f3ec344b1eaeff56a462cd0cf42f7dea
MD5 6ad371c6b1c4be5de32a0daac9e5a10d
SHA1 08ee79ce748943982e77a60b62d986df5ce2dcd4
SHA512 8654941682c369fb617909cc6704383faa28f2f1769db8a8ce065acb58e16f2068b66c39455bd391b24b0631c2a59ca6051694e394dbfc386dd94de3c3540c85
SSDEEP 192:mMxAw34KM2jLTzNOu3RNIZRfuZv+vJLBIX0VPqUA:lF3kOLTou3RNGRfO0JLB0vU
TLSH
T19D223065A7D1FB39CB2723F8025189A77732495C2ED3C60321F2A7381C578E54E5AC0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e89e64e1e99fefb8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e89e64e1e99fefb8_0
Size 31KB
SHA256 abd333ff873b1045b42025e8fe59b63f37a0a0e20d82ad14e36ddd2aca28fbe4
MD5 19c7c9d0bc13719c5d8f5f41cf728766
SHA1 9e4e3826b0b577fdb2fbf81f9644cbac48982e0c
SHA512 83a614cfcd3157544b13d81a45fff0a6e91f9e16bc3a092fe94cb08b1c20df6033c03f51dabcd8b3e4299c440bd05f729e274685fc53917f0893db61ab0e50da
SSDEEP 768:C6MPBxETLhzABQmGSu+Gvxnf08KkHcsCm7c+doQ43XubTNSJA0eri:V5TLhz0QmGlplKqcJm4eoQ43XubTNSJV
TLSH
T1D1E2C685A395FA9ACF2253FA0242C92B7335454D3ED3932736E9BB251C253F64E49C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4b845554c52de3c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f4b845554c52de3c_0
Size 37KB
SHA256 4a3e6b8e35e0645f0ef265ba06eb78e0f6c22f0ad7a18b1660ffbf2e6f4ecc03
MD5 27e2fe0338778670680e7c9c0aa286e1
SHA1 84d86536d0a9251c8d7e8fcb0ba2be7cf41f2de9
SHA512 deebbefdb3b2d3584347e416ad688ad3f281426ff81bccc496d1cae74f9d05c6a6f09adad8abe5f34189ba708dab665d13e536f77265542053cf9fd06b6a4e44
SSDEEP 768:QdsUuxiQUM8H9Hkxf1YruKuTLRr6LbqrjNqakHWuig:iBBH18f1EaRWxakHWui
TLSH
T19503C55467E2FA6ACF2753F50642881F763245DC3EE3920326F8A7351C263F66A4DD0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa560e6e51eed96d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fa560e6e51eed96d_0
Size 58KB
SHA256 b3033af3d3fea1bb4fa07235a9193075e93d90f37f50377f0430623f90fc9bd1
MD5 5fa2bf47fcb7592a3d7ccf19d5f5a037
SHA1 5d15fffcfa89343e1a76b9e017982741393d0e47
SHA512 16d711cd7db3d94c63837399f45e075a46fff20c71f3e2ab572b961711952470f34bddcc73a44ee24f6ce1b24a3f583cdfe329f1f9de0cd35b89b80effd2d93c
SSDEEP 1536:ZxGSJUVVh6R3UHvTyP4AcB1DpgvW6kVMDnMI/7:3kVVhuUGPWB12vjDnM
TLSH
T1934328CFB1C2B7618CF272E2405B9A0E96BE65054CA0545EB916B6F45E3198B803BF39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 14KB
SHA256 e01b86fff37d8fda4ea5e5be3ff24e678104dcbee31eb0bb83a8016b1b49a791
MD5 56da66e9da4d5cdf583d1e32467d6921
SHA1 318b8fe9b8de457484ca5ba340ec62736abf17f6
SHA512 7b3b178dc2aea3fdf239465fdaab3bd2b60c9b0b740bc3914b83068f65c71b55ca0293b6b76796e2263149e3b9a775e486c7da30a1cbbb31d86a990d60948e18
SSDEEP 384:OxUxpl1b0JPVOHVN+O1DlD3UqcEZu2F/wI3vtaLC:OxUxpPb0pVOHVcYDlDkqcGFwI3vtf
TLSH
T1F5524E4AF1C6095AFBAAF5B349D1BE443775F80608479FCB3B215CB9BE173A03A91418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 12KB
SHA256 b1fb80d3a8022ed6081d520c2e10cf206ac1c61b69f35e710afc188150280297
MD5 4d5c1bc220574c5d5ced33accff5d587
SHA1 ed2ad37e3892687aa1c483b5ebcd49753e4df08a
SHA512 65953be00d21b7fa0c7b8ecef105e71c6135427d656f70fe2d3a7a53dc226f3b706dae7197c1b1bc8ff70c91633dc84afdfc33fda21cc3fc6b53a99ddeaed591
SSDEEP 384:RUxWaTiIXuGIXT6bxHqV0r7qGWEFwd5ttPhZ:RUxWUiI1IXTGxHS0reqwd5ttT
TLSH
T1D4421C9AF2C25C6AFB6AF5B318D2BF543634FD061443CE8737505DB4AE837A13A64418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 10KB
SHA256 9500913e0f2ab4a64d90959e7d83e576b9a8eb7862762cf7e29caf7180cdb6a4
MD5 6cf2adc17b36ca2abee62f04ea9d72d0
SHA1 b6fb1434af58933401d7e2393a8c73be2b7eaa03
SHA512 ba03f43e14da59af52abc4038a8c6db7bacbf8de2191856d2f9eee0f33ef71f4a3ed999fa6a0993499341a067c9df8e58476b3fb2951891b3d4909bfe6b07d9b
SSDEEP 192:H25hSLCJUxhP2EmSqvTE/Ogmh5/IEIFl50lSxPD4XIlDFw5zEiUIU46FE4o:H8hmaUxhP2EBqvTYOgmh5/IEkzaSxhJ4
TLSH
T12522DA5E75523C56FFBF74B208E1BD183636CA4708631F823F925EB5AE433957AA0218
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 cf4bb4dc7bf289ddc5cc86b829e6cf24368badf42222132ebfeeceab55f8e110
MD5 a815a2f0160cdd2ddb5269a799b613c1
SHA1 ccb15c9f7a1bc173e5f2ffce3927731da5e11299
SHA512 e17ca8a15f296d1d0c68ff4a366e9d1614a79166fddb7dd4e8721681567db2fab9ae9949089b98fd269a76b5ba5dca4f5e89f9909d0793125220e9a7b097e2f1
SSDEEP 192:FsH7gLCJUxhP2EmM+bTE/OgI5/bFQFlhyDDfPDeX+uNjwdEg3iUyIFmcC:Fo7saUxhP2Eb+bTYOgI5/bF8zWDfRQjz
TLSH
T1F922DB9EB5421CB6FFDB74B308D1BD19B6B4CA4608631F823F115EB5AE433957A70118
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 92691f0ad93462a2419f3268f61bac99eb7207a98845ea459311f0b18e827031
MD5 64af5583065f532be9cf6a67a63d8e97
SHA1 335c09b291de15911b7867921f5355d796e3050a
SHA512 84c094951615163df5afd50a3c99c2496e2c34265b4ca8c104f80eb4c257ff191f495958eb75f096dd567e8f7265848c398cde017c952344b15ec41d20f46b18
SSDEEP 192:UUxWpBT53qroDGypTYj5TnN/EqH18FUras0yJEmwEygGtV7P1Qx:UUxWHT50oDGITC5JBH18ira/WEmwR5t8
TLSH
T15D321D9AF2C25C6AFB6AB4B308D6BF543A34FD065443CE873B405DB4BE433A13965418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 885da13d0c3f364f426c90ddc02e58415670b810bf9a63c4166e57c8fa2027eb
MD5 3518c3577bf81913165175f04baebe3f
SHA1 b5bc0c60607eb8bc247fe38748d96dc2ed591f2d
SHA512 42aee19ddeaf5bf7744dbb80df7b9268030139fe8ea8ae1c091ec40c1af873145594d26a946f7608af7920662ab167ce70d1c7d27ebbf7b6708a840a7fbad0d7
SSDEEP 384:QDUxJbM6vXCI/o7r5xZrkkOpgM+4t6luqc0Zjts1y9w68Ftl+XvX:QDUxpMwXCI/gr5xZrFSgX4t6kqc2Cy9r
TLSH
T10672855AB1560A55FFA975B349D1BC883770EC1758C32FCB2B205CB9BE233E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 464b655928e404351912467a26f4b6729c86c4d5419ccb680a112331cf1d4328
MD5 28bb61d67822a77e6bab464d1b457a03
SHA1 bd55d0b634bf460313276f1e5960c557dc97671d
SHA512 831cc757fdb34a267865e05820ead201823125468d9d67f51cba45a43284fd12af3405fb4844698d43c82d67498128ccfda6c49fb3b036c8ee0691365493c7e7
TLSH
T15B516018AB271DCFF3BC8D7159E0FB183238A55845072EC37215B2F4DA12B612BA042D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 0511489e2f5149378e1d5a7e753296267e2735a5c9bb67a024c7922bb0a08cd8
MD5 35bb0626ae12fa691837ce54204a1950
SHA1 d9e308e97d19758921d687cd936e4f084767f9a9
SHA512 52fde019c3ca04c6aca39cd6bd475ffa28861c7742196e09d50768992c2c948392cc0aa0f0f65ebc958047c8ae18fa0d71dd97d5d833668545506ab1462b8b5b
SSDEEP 384:WdUxcMfvXCIUo7r5xVrkkOpgM+4aQuuqc0Z1ts1y9w68dkl+Xzk:WdUxcM3XCIUgr5xVrFSgX4aQpqc2sy9z
TLSH
T16662875AB1520A55FFA971B349D1BC883770E81758C72FCB2B205CB9BE633E437A1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 fed9ec74862e5296084267d20a1da6a762f271976c2d12cb84c852a0e3ec7f99
MD5 57bcc487a42782b37bdc2a233734be05
SHA1 a34f3162da0142cab75e88121ad082048aeaf85e
SHA512 6c3f478644e67bc111fa54953b7f3419ebb48379f20d3562e55474b4e47bf3c7055abe07899fa92d6686f68307125e63505a8d2466733385170ea84dc7abf0e3
SSDEEP 384:5DUxJbM6vXCI/o7r5xVrkkOpgM+4t69uqc0Zjts1y9w68dtl+XzH:5DUxpMwXCI/gr5xVrFSgX4t68qc2Cy97
TLSH
T17072855AB1560A55FFA975B349D1BC883770EC1758C32FCB2B205CB9BE233E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 ded9fd8ba4b835dd6dd40afb1eb35a506d7256162a56f1c9261196b01344c055
MD5 c704a59ab8cba45e10c334276457d845
SHA1 d16f454ae979388a972b657150e4a1786aaafba6
SHA512 cd33adf0f4f741e7115575cd877591834aea01568c3d481bc8eaa7bfd9d8aaf2bf1a997067b3c4fd3ad73c2a66beef180e02e3fc6f7464ca31d2b4f01c303153
SSDEEP 384:QxUxM26be9zPfOjVU+O1DlWNUqcEZu2Kx9wZ3vtaL4:QxUxMNbe97fOjVXYDlWeqcGU9wZ3vtp
TLSH
T166624F5AF1C6095AFBAAF5B349D1BE443774F80608479FCB3B215CB9BE133A03A91418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 5a63daaae3d898532d347350214c5843fcffe94317981b3613603edea00e0940
MD5 df2fd68e4d09218fcff0bc0ba01be1d9
SHA1 f633086aaa470aba2e2e55eb18163cee37490e4f
SHA512 46baf9afab779d389687f1c312f15a7843c0e6691eb3dfd8ce1188528d5ea3942f53378431efc784b3ea29154cf7a9ea06e1cb7cb8d09a41ddc87d8cc50f0332
SSDEEP 384:/iUx6MqvXCe9ocr5xV2kONM+4aKuqc0ZitsJ9wh8dIl+Xzh:/iUx6MgXCe9Hr5xVXQX4alqc2B9wh8dR
TLSH
T1EE62745AB1560A56FFA975B349D1BC883770E81748C73FCB2B105CB9BE633E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 f134d1717e3c09257d1e274462884daf81b6b783296cfa67da988e276e8708b9
MD5 0d850b0892b730973c4675a3a74051e5
SHA1 e7f66316808bb2ef0c33ed81bf13f247b9fb7814
SHA512 d78918104fae3a8e2c7a6c0ebbc81c6025d61fc97f032f735af649d932f985b7f8829445474423bd52398b551af515506672639865f1d8354014e665f565cd2c
SSDEEP 384:k9DUxJVM/vXCI3ojL5TZrkkOpgg+4t6l4qc0Z2ts1o9w68Ftl+bB7:YDUxvMXXCI3QL5TZrFSgj4t6+qc2Bo9x
TLSH
T15F72865AB1560A56FFA975B349D1BC883770EC1758C32FCB2B105CB9BE233E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 81d41e3709d6291e1f6a939951b3d6ca6192287ec9176e0491d9c1c9c5743d05
MD5 266aadc0b4c5bf9240aef54ba432073e
SHA1 63a3fcbdae903d255655f1bcc0f56b17498abf0e
SHA512 82cc18ec6f8038f9c5547c1f44eb8f416cb4c245823aa5eb275e5903f877f0be55ca844e7e3ce4399438f4445c571bf436a695a0d2daad5f883f77c9c8e87fd3
SSDEEP 384:DDUxl82vXCe9Ycg9xVGkOpAu4a/S0qc0ZW+sx9wZsdIl+aL8:DDUxl8EXCe9zg9xVnkj4a/Dqc289wZsn
TLSH
T1C862854AB1860A56FFA9B57349D1BD883770E81748837FCB6B105CB9BD633E03AA0418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 193ac316d75f944f44e09396416d4547e22ff26c78a805f5fabcf1ccb4c6d656
MD5 02fb3f26daf24789535ce76868e39e84
SHA1 dfe165dddda353428298da76922529cf7cc010e1
SHA512 dc6698aa72f1bea9d22b2e1b76a682013d2bb61a6324acfea52e8332d515b23922f80beef40ea7fec448ef15ac0c2d5209ed743a8de855e04c2708f7bc6f7798
SSDEEP 384:SODUxJ6M6vXCI3ojL5TZrkkOpgg+4t6l4qc0Z2ts1Q9w68Ftl+b9T:SODUxcMwXCI3QL5TZrFSgj4t6+qc2BQT
TLSH
T11872865AB1560A56FFA975B349D1BC883770EC1758C32FCB2B105CB9BE633E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 a2ee8e6ef0907af5ee96a882b5859ee42e80be6d398160202c62d57987df8d2e
MD5 c841cb6ff60bf82c228fc1288e01187b
SHA1 d7f48c6331385e8c6afd6d586ea3ecc7bc5100cb
SHA512 6d50bc0644819760828d05cd78aa0ec284054750ba8333dfe818d35b65e6666aeab7be677c180fa46860bb4b949c4c93844f0a1a9f9787576436c8487d4f54aa
SSDEEP 192:etUxWdAT5MqroDGypTYjtT4N/EqH/8HUr7qshyJEmwVygGtV7P1Qp:etUxWaTi0oDGITCt4BH/80r7qGWEmwAU
TLSH
T11C421C99F2C25C6AFB6AF5B308D2BF543A34FD065443CE873B505DB4AE437A13A64418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 02be9513d846fbeeb17b4cf869259ca34f1acdeefa341f8138112c2de1a6b32b
MD5 6a8ba829412f50608a07e1bf6fed1697
SHA1 e1d73d42e66a570200bcc1537a01a2dd9d77e120
SHA512 4e507092008ca4be6989ae91d221c6f1333f22f2273db350083a3c7926e5353d8662bed658d7410affdd3fdae03771dc0f83d437b29df2876b083ee66f8fb53f
SSDEEP 384:exUxM21beOzPfOSVU+O1DlWNUqcEZu2Kx9wZ3vtaLu:exUxM2beO7fOSVXYDlWeqcGU9wZ3vtv
TLSH
T14B62405AF1C6095AFBAAF5B349D1BE543774E80608479FCB3B215CB9BE133A03A91418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 69939cca5789ae09c5e2e9280758fbdd88288a4d43f945437092d5dff9ec8d4a
MD5 83afb531751a652d04b66f399d938a3d
SHA1 3555edb523fe1f626ac03c02b7c6d9acf5f47fc7
SHA512 322d07fabf0ead347382069fad5638f65d2855645edcb3035ad65b89b6e8d0c0f26d7a791598ede08868076f996a3458a30e991a7b5910ccb616bca8279190c3
SSDEEP 384:MiUxT2yze9Mcf+YVF6OpAqa/UoqcEZR+sx9wZ4I+aLK:MiUxTlze9Hf+YVQkTa/BqcG39wZ4I+b
TLSH
T1FE62755AB1860A56FBA9B57349D1FD883774F81708877FCB2B105CB9BD233E03AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 37eae01a41d8dc81ac8a732dd542d5722fac6b22e9d74c7baa556b6ce38cff0f
MD5 5163b09c50d2b4eb0a04dc84abe6bf32
SHA1 9efcd7276a4708ffbe0932e65948d5ed75c330cd
SHA512 f28ed2a14024366af396d92ffdb94758bc9df06e5005d8f72ffcb9ec9e5271a38e86f45da15d12171f23a51cf02138bcb5c090a907aead66152b6baae4cff0a8
SSDEEP 384:5iUxhMqvXCe9ocL5xV2kONM+4aKuqc0ZitsJ9wh8dIl+Gzh:5iUxhMgXCe9HL5xVXQX4alqc2B9wh8dI
TLSH
T1AA62755AB1560A56FFA975B349D1BC883771E81748C33FCB2B105CB9BE633E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 c6312c9bda41154a75816f6e0bb71489f7ece02a07d7eeca54e5226b204fcfad
MD5 16ee45ee7d6653ab2928f89271423f3d
SHA1 447179341734c5345e5ec0ce60a0bc20c9653bc4
SHA512 81e26ff777dd81d3afee69617579e0bb99f04c899e8f49b355f8fcfe02bff13783bd7726e6bd42206054b929797aae92c509842a281116a05432adf9628658df
SSDEEP 384:rDUxJbM6vXCI3ojg56ZrkkOpgg+4t6l4qc0Z2ts1Q9w68Ftl+b9D:rDUxpMwXCI3Qg56ZrFSgj4t6+qc2BQ99
TLSH
T1BC72865AB1560A56FFA975B349D1BC883770EC1758C32FCB6B105CB9BE233E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 0c029e65b1d99baf1ccab6d6d78b2203c2b4011d85216dafb79873ffef44650f
MD5 a71060d272ae32848c112eee3a4c7873
SHA1 3cf9c8c5ecefbab51d49409f912198a34d6c539a
SHA512 8da756a53dba1d29602cbffc2aa10929bbbf4ccc4e09c5359f49d9016fb362567939bcf1dc297b1aaf5bc4f16cd726262414f5107bd75ad373f87fceb5b7471c
SSDEEP 384:fUxpl1b0JPVOHVN+O1DlD3UqcEZu2F/wI3vtaLI:fUxpPb0pVOHVcYDlDkqcGFwI3vth
TLSH
T188525F4AF1C6095AFBAAF5B349D1BE543775F80608479FCB3B215CB9BE173A03A90418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 28e15820c95b5d0040d2aa2776cd9bfca781b454b873f3ec8f2669b4ac3d4c94
MD5 4f9f29e92366e53e1b009cfaab2d7cf1
SHA1 150dd7be670698af3d3bc0449bf2589a2f958795
SHA512 184eecf1181d59af384bee6ce66670f9ba0ab61796476ef71f9b66d3ecef0e473c1b1eaff5332db0ffa7229dde5f4a1e917d9f81081d106b657334859cc3ee48
SSDEEP 384:IDUxJbM6vXCI3ojJ52ZrkkOpgM+4t6l4qc0Z2ts1Q9w68Ftl+XvL:IDUxpMwXCI3QJ52ZrFSgX4t6+qc2BQ9f
TLSH
T12E72865AB1560A56FFA975B349D1BC883770EC1758C32FCB6B105CB9BE233E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 4b5847226842000d3fb6db0cf9bc913a97470622509729491651cf74bf461b9d
MD5 cba4b67b64ccaea200086c3b19ef2367
SHA1 05da6c0031213c07a5961b69b39c61296e28074c
SHA512 299881918690234346b99a34d813881dcc622152fe89b8a388bb0b7050efe0d8f7af2228e9cf90adcccdb6d771d41048dc7dc8fb92045a179bfc8f92c7bbf8e1
SSDEEP 192:ZdyCBLCJUxhP2EmB2vmtQTE/OgN5/sAJVw4FlhfTDfPXpXHK7gyw5E//vUfVFl0B:ZwCdaUxhP2EO2IQTYOgN5/JWUrLDftKZ
TLSH
T15722C95EF5C21C56FF9BB4B308D2BF193634CA4608639F823F116EB5AE433957AA0118
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 dbbf4069a6781657659cccd2452007d1d2cab8655ab6a7aba589eeb14b2d8a93
MD5 b533b31400be222d0b76147097bcd979
SHA1 acd1a69bad2641fd15bf3d3187daab277a59621d
SHA512 cac956a8d41fb456dd555527956631f6ebd4ecf1f9ed917210a96df80315480ef5959c15688b4fa27068169056b6a5f04e94941c2d4f1009e1c9637c7a9731df
SSDEEP 384:/UxaC1FjYMG+xncV+1LcO5MqtqpRfIwm5htJww:/UxaKFjE+xcVILcO2q84wm5ht7
TLSH
T15E526E8AF2CA1C6AFB9AB5B308D6BF583631FC0618438E8737505CB5BE437A13664419
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 1e7c94dbcb3d5e61b828a69903d76363980fafe10e7290037535bf5e1f20d32c
MD5 7390000fa2e2e528552c57e429e8d389
SHA1 914eba209760f2b1c9bef0ea5ab4c02f5f8b823c
SHA512 388d4f8db252abe04df523bab8dda474c2e05b9cc0bab5d154274b8db24ee31cb60803d3820e5094f44498d587e0b7137474117c28a23d424718b6e2786dac2a
SSDEEP 384:bDUxJbM6vXCI3ojr52ZrkkOpgM+4t6l4qc0Z2ts1Q9w68Ftl+Xvb:bDUxpMwXCI3Qr52ZrFSgX4t6+qc2BQ9n
TLSH
T10172865AB1560A56FFA975B349D1BC883770EC1758C32FCB2B105CB9BE633E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 6538767511c0519eeb9c4aee848c2e35ed32caa80a03d8145c15deb0dcd05d51
MD5 9cd3bfb0816d95770c9d51830cbe597a
SHA1 bcb104e85962eb1bc9a0b8442a0e42dfc2dc0f3f
SHA512 7fb4dade1f4127551f0f7ac1eec42ae2093d400e3a000ee85876dede5df1becb85658205272c999fcd155dc3fedd8f2254fc9d1a996413e092c65c5a420be62c
SSDEEP 384:sDUxJ6M/vXCI3ojL5TZrkkOpgg+4t6l4qc0Z2ts1Q9w68Ftl+b9M:sDUxcMXXCI3QL5TZrFSgj4t6+qc2BQ9S
TLSH
T13072865AB1560A56FFA975B349D1BC883770EC1758C32FCB2B105CB9BE233E43AA1418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 05a24b191341241e25d08f98c13b2aba8ce6d71638d1e460eba935b68392f1eb
MD5 f5105ec1c16a9a0426161186f1287d93
SHA1 807add51cf95b8025b855bd69b74947e6b9a8cdc
SHA512 09fc3badc0ae291487e907a7a2378aad05f01fdfa2dd1199613d3d19b60dcd6bdf896911ea98873205bb3946e491093a4ca605ba8d85702dbbce6df34a035cf1
SSDEEP 384:fUxaC1FjsMG+xXn+1LcOnMqtqpRfIwmJhtJeK:fUxaKFjg+xXnILcOMq84wmJhtT
TLSH
T1DF526F8AF2C61C6AFBA9F5B308D2BF543675FC0618438E873B505CB5BE437A13A64419
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a39af.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a39af.TMP
Size 2KB
SHA256 41bacaf27defef7440cab964f99bf8423d5a55a5d86176211d2990099ff1f221
MD5 82fcdb4d9ebdd972436a6e0cc9a6c9fd
SHA1 d116ea11e38121f8d09e9d3a512216c40a924621
SHA512 1b227a2b09bd467339950a7fa215aa7fa001d69f37557f549db1a17fabf137216468d0fd3917e37a0da2530f65184c5a3cc17205621bcdcdde5cae2c476d2f84
TLSH
T108514F28AB671DCFF3BD8D7158E0FB583278A55C45072EC3721562F59A12B612BA042D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 b06a0800b979684247cf0c453b1003b3ca7cef023138b486e7cdb712d8bf5407
MD5 83d278fa3a9e58aec6acb6ed6bf74b3e
SHA1 bdcb22cd092280a48d7b5e4a6cb03d16e41fa073
SHA512 de998842cb9da45379cb2ae5189514d779d8ac2758f033d0bca0621b6389349b5aa6f363875262a8fb36b216f7e02f429e371adc4bdd33aa2e40d3b0ee462b7e
TLSH
T1E3B00151F669644BC60236B298D1298A71B44F10C307154ACAE4A9B8DE5578A4516158
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\000003.log
Size 61KB
SHA256 6a6940ba7528c0428bd933770e691ecec3a7584d0ccbc97bd72d28c0f6ab4db8
MD5 a3bddc60283090b3253e4d6c29d48760
SHA1 4202f56f9016d4e2986d76b53a64f75d49b94617
SHA512 086e38e2a05055f0d2e674d5f4b61a1c5c88aa28178d08ea3af2ab2e007c3ea371990d47cd8d6d2e3ce896f010895d5635d7ec55e0a038cf077ea23b7eac73dd
SSDEEP 1536:FRh8ZSZOhIM/Vk7FCx4ASjceLPAhmSPRzNG:VDmhmSPRzNG
TLSH
T17B533398F6FA5C12CFBB5B1B39B178688873F51174C48C9924661E2D12B6BC0734B6B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\LOG
Size 341B
SHA256 f918b3114c425d3bbe3fabcf8132f5d107ad5b15e2725aa938a4091036e1655f
MD5 34c6d303c431f69570da1ae5b4d89d8b
SHA1 0004564797eafe240b4462ffc09b3277cff009a2
SHA512 ae53db6a6ff0bc2aaf3cdabfcfc544e6885e7712769bdd6e277080aa4f7a3cdb1b66ca28b7c7cba3e571dfb1b676e5a8549e31e03e133fce7f44c762c8b52bf6
TLSH
T1DEE068B8C4C9C51B560420D664347B0E96B3664AE788BD890E83D818B487044D6AF251
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 20KB
SHA256 d3f3c05c5f47a92ed02a02cab623103362433b1da11064ce91f750a5515843f8
MD5 9e8946ea0a12b2602bd2323e947c67e5
SHA1 7d7fe4203fcf175eaec77b8317251cf83ab1530c
SHA512 0dc744672aea73004885fa8c7c372401dd24c3f7ec8edab610ebc7763c7fa67615b917f6b82bfb2bb783e4a6ea849fdd3a75bc3959651e155330fe3ce10dda4a
SSDEEP 384:fBuCrMjcqRzEpVXV9q2tXuhd5QeqQqjEW/GSxDG3G4GcGIGcGMGEGSGiNUheFXul:JuCrMjcqRzEpVXV9q2tXuhd5QeqQqjE8
TLSH
T121A28A66B5F9120AF27B5F7BA8B207A54DBABD992D04DC1E5860214E4C71F40CD33B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
Size 343B
SHA256 f1b3438caf75626cab4e95e8b8f26d0bdae3affeee9221055b313049d327e5e7
MD5 7d6cbb9b9ded665768279b16ae7fcf82
SHA1 14ad5e3079a7a47c4f8e64ba3ffd04dde2e313d3
SHA512 9eec47dbbe48dbf6b7ba5ee305fb457e3094f51f5a4d4cb14036bcd97c1e56109cf883a4bef762f3c4376327936ddb18ef4761fff94e65750cae6e18d6b50fa6
TLSH
T18CE068B8C8CAC12FD24851D20138FB09D5B3624F96C8BD820F8CC804B442144F83F261
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 198KB
SHA256 dee1bd712a0b3cf77400eb8d2b4e12956b2ebcc517f7bbaa4a1661abb142b1d6
MD5 7314885abc805554f94ca4da1a5f1623
SHA1 2859c6275c4fa158f2d9d2e6b17b6d7933cac318
SHA512 a1571f60337b78bd01f7c8a91f11a41565f926e99be011392a3c0ea95c1b66eceabf495c8306f00ca3174a90d48f477153fe940e25aec9b2100b286f6c6af790
SSDEEP 3072:7SG5XlXrg5CJW61OPzD/iZJGNyW6sOP5qmltqdwlBoSwf2Np+QeeF3EPKX69:Hqihw
TLSH
T16614C5191163A389E52E83B61B25CE0BE336CED496E4745AF871374D35B3B403A9273E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 b90a3228d0a426fc1490ed37e34aa073eaa9175004c5ee40bc23d5813606fc3b
MD5 4597d52f2513410c024ac0b53cd4c8dd
SHA1 fdce29ef8e01ff87a50624dc66a839ba9d55817d
SHA512 5b94553f034a4765575468a775261a35848eae46a90f808872388f87699d2c704981cb21260e06b1ed960ee524ef2560d3cb5bf68ba58fe5497b271eb6c0850f
TLSH
T1A1E06878C4C8C16F96B426EB25387B0DE9A7A60EA6CCFD520E84C804B446088D43F540
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 535e2599e95178309422597db5d43e453de148d094150488ad5951bfcf866ba4
MD5 757c83a45ecabd7d14aa6a0b6f344d67
SHA1 b3ef0da23a905737543b25ec48e08326e6ac12f5
SHA512 de77ab8c8832294e4c8ad1a7f71654d154aeff4dc71b6ecf4614559245778a1fde483d34ac6bbd79bf74a8b819bac0a6797b6bf818a19c6fbf2fbd355ab2448d
SSDEEP 96:DqGMBaVaiZjhnwBfpzemyU5GviRx9GEFf1V:DqGMBaVaiZjhnkfpzemyU5yiz9Gwf1V
TLSH
T10591A9F383F5822DDA1191F0AE186F1FCE1D045643AC395A85E06E1B93F24B1E091F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 63KB
SHA256 17b78b63e873df3475b5fd93e457ec41f6758b53043451d20d86b81952b3c6de
MD5 a1a4682c2008ea127dc6166fd6b28653
SHA1 dca5c2377ba82d4f0889a34358577ba59fdc019b
SHA512 ca50e0a6c506fcf87b50566a12c69d577d97c650d5ba484e92453cc4ba80ac22b029c4bb762b5fc9bd3e84814e7fac02515e50af031d7149c22cf731fa334e28
SSDEEP 768:voijFuLKMi+QK+5eMEWFhZlwqMQirijZdzf:2v8Dn
TLSH
T1A0534CF783E9862E9D1656F09B14AE1FCE190628075C387689E47F06E3F2471E14379E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 40KB
SHA256 9cd8150385531d8249b78ec45beeba3311190f5f9d4faaa7fd2135f734fc4eac
MD5 2d100f860292246dd130b020aef050cc
SHA1 f4e0d6cc6307bf0e085f4171307733b143d7bc07
SHA512 3388b61b20c83fcb57ec9d2e184f051f15df2eca3f0bb42ff96394447ac6eb085651763ac42ea865185fb43dccc7503c85b0046f4c74abc8e15ce24f83444023
SSDEEP 384:Dyt1mf1W9eeHSJ/wk2FcegJ8IynZkBeH5L+eXqLndTeqmn7e5JZe/E68VxO0me8s:zvLB5fMqAoPMi2Q3SFZHVhDi80QREVWE
TLSH
T14C135CF743B5862EAE1696F09B14AE1FCE190529075C38358AE47E06E3F2472E14379F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 50KB
SHA256 259e7539be4d5145ccd8bfd2cf9c11679addd728bd09de44ab56558429be3841
MD5 c0b2f8e857f08906132335eeabde20e1
SHA1 90c26370c46a7a9fe198d4a12d784eb6a8e2f475
SHA512 107ae3612668f7563b6b142e505ffb32bac2c9795dc40b0b23ecedd829ec1dc1f612af1f06dd84e9f86612eebca06e5dfaf4455121b0af7493d10adb921cfbb1
SSDEEP 384:Dyt1mf1W9HFceyZH5L+edqmn7eZe/E6VxO0me868GEZTlOECX0a+ehTd7ZJWV1Ja:zRoEj6MqAoPMi2QfOi80QREEYAydVl9u
TLSH
T1D13329F783B9862E9E1656F05B14AE1FCE190628075C393689E47E06E3F2472E14379F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 36KB
SHA256 9b22204f2b42306e9c08de46084409f58d094e5dc52a8995b28fc70da612a8ee
MD5 8717d7dd9d6d25c338068d920410a17e
SHA1 21c0159e7991dbcddeee0595aed6d0c3304cf818
SHA512 3adf10b909a7a677f7ae345cbac7d276eb09082690f117e036625086719a5e9ef7d64143253eae892a8cc605da572ab61a9cd0e1c7211eb22922401dfe47d944
SSDEEP 384:Dl6yt1pmfcWNWMKeWeteM04TJAgsZLye0J7+zk2cBeXYaleuu3XaVaiZ5zkxm9mS:W7xB4M1qQS8sSDdmSNViR14ap0KGW
TLSH
T131F22AF783F9862E9E1656F09B14AE1FCE190629035C393689E47E06E3F2471E14379E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 53KB
SHA256 a38297309cf768c8f3825c93cbc77385868ce22421797ad6c63e057db2f0b69a
MD5 64ef3b806cebbfd585bcadba0170db49
SHA1 3bb0fe8f4592d5cbda64128027b4cf59a5fd8b18
SHA512 8e9639b3b92885c25307547c1a4e7f53d8fc541d3a31998ec1b07cc240d810e18b7b8af165a3c878155bae4ef30c51c950ec69e8181f73b559f46024ad782c81
SSDEEP 768:zXoEj9MqAoPMi2Qf2i81QEb/ME/4GgZlI:+JQy
TLSH
T19B3329F783B9862E9E1656F05B14AE1FCE190628075C393689E47F06E3F2472E14379E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 df5f10299d324cb6eddebfdcab4d0c9fed44815c9a56e67f83ecaec9d5ef20fb
MD5 6bc3180c10cc4eae27f891fd7d86cac8
SHA1 30595da48da977d292d348e9201a8e33db887dba
SHA512 a1c5d7763cf9b3589fca9496308bfa8fedcb5621413772dcf7ac776db694b52c6abcb832b557e6228fe76c74cc4793f8ffb27ca664f43861e22fd0afb412ae57
SSDEEP 192:DqGM5Sn7m0aVaiZjhnfpzeCU57MiGkjRigkvCm9mrmBmgmDmGmDiBmQx:DqGM5Sn7m0aVaiZ5fpzeCU57MiGkjRii
TLSH
T177D1ABF387F6422DDA1195F0EE08AF1FCE1C0555836C386A85E0AE1B93F2471E181B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 56KB
SHA256 8cbb60b38ff9c9d1334687d075a3080f35763e1b40c0bbe119b7ed5b84991d10
MD5 df091d8ec80b170cccbdfc5d1e1904d9
SHA1 c0c3aa69266839046ed01fddcbe23807b3eecf40
SHA512 db4d71a654f4d44a47316f2bae4e1f1ae22714b98c23317a6744c67fbc64ee778a68de929d921f6929580a069b49675070848e724ad1f839af2eaed842c3ecd4
SSDEEP 768:zPoEjBuMqAoPMi+QK2i81QEbtMEWOGgZlP:vuh5
TLSH
T1A4433AF783B9866E9E1656F05B14AE1FCE190628075C383689E47F06E3F2472E14379E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 094a29de6e94c3813896289a6c9bbe4ee2c58fdfd8ebb43c9be8b05dd51f254e
MD5 a3bd7d2656e3ac94943c1d8a9101122c
SHA1 c8c6065c0f70aa56fe8b89d1cd6445551977d2f0
SHA512 7609b58810684bf2f4967a6eb8798cefd0a7cb465e4b6e741c02d53be0b6543b823aa4cc183386bd1ece33908392f49ba8ef69edca724895e50caae115b40d1c
TLSH
T1B4D02233160030F9A5AC7E96D46BFCCFCB76212108429DD992D0AAAE1AF687D0A2B045
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 1ca2623c4412cc4a652f99b8874baa50643ec418a26f7e808f0635f3e1a07794
MD5 a8be6bdda2acbb356adff6db3c7fe5a9
SHA1 dc0606262676a9700206431720f280355478507a
SHA512 6998e87a74f208bddb50ad19c5a57808a4cb26051cd07ed39f0ae20b8cf689f7919808acab1dc2997c882b8632a1130b2fb5b4a603cf2c0c10decca23b205a7a
TLSH
T1E8D02223120470B9A5AC7E8394ABFC8FC73B11610846DDDA52D0AAAD0EB186D0B0F144
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 6b891cf206c4343f9281b243717fd38cbfb0a80e04464a165861146a0435bf72
MD5 a924c46b875b3b6abe7cef71062120ca
SHA1 61aa9406296585fc1d27657c98d2d1249e26c58d
SHA512 b1b2c85b2ede8ef6da8b7a257b123a4a4d50b197339c57fd9e462eed201b08e95f1f35fb79fb7620dad2429edf9ee0e6190d91b39e57a4527336531759366fcf
TLSH
T1CBD022232200B0B8AA5C7FC3946ABC8FC776112408429DD851E069BD09B68AD1A4B4C4
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 f63c169845a5293976ceb07f186bae6892951799fc39944f3de4a883268bbad9
MD5 5d82f9c6ccbca1011bd2be45d632a31e
SHA1 14cc5d5814950871bbb234a6a25011f400cc5d74
SHA512 cf56e3f3ad57c8c6e10ee2fbd08a478e87bf5ce0830c500cfb94a2df62196a74477d2e5874f4493eef5a2d1c5b5fcb29ffd63d01df4a58951aeff6ee852668c2
TLSH
T10ED02263120130B4E55C7EA3846FBC8FC73A222008469ED992E0AABE19F286E060F448
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 11KB
SHA256 b171c93d92e53979e72b5bc04073f477c29e3899feaebe61b5dd5d2c09acaede
MD5 5523d94ca56110fd3a3187f81e486139
SHA1 e310cc1052a989d89e9b721bee15a1be364df633
SHA512 4710b0708d89d88fcd7500a3e57d163737a3837b8a046b5dafa725f13a509dff7ac1df48ede1a69b9cbe1944885e4eac07a4c0269e19530231bcc932fa7750e6
SSDEEP 192:WUxUMUUUiU0UaUrUqU/UIAULUIUwUWUIU/UBUVUFUyUsUkUDUbUiURUTUUUjUCUv:W+NpXJxgDO/AGJbvTgWaMj9RmANk0t20
TLSH
T169328BA7D67EB42B303C59AB0D45BC0959BEB4314251A8F8DBD7D27CB0C19F70B124AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity~RFe6ebf68.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RFe6ebf68.TMP
Size 7KB
SHA256 8a9d77498dadf61d277c2e0cce5b7f5f42d4d1fde837f1893968b5400c41f616
MD5 f3c80512c4a6b2e2579c52c88ee11a72
SHA1 e5686ab4b364d0d55671cfacedb000362611c4d0
SHA512 18cc5e39cb440553ca802de0c1744a83b307559f54cfe45630220932a0238f50ac0dc1a6bfd761c2ddca84b5bac5fe33a6bb5c8471628cea4621c55f4adb20f5
SSDEEP 192:cU7UPUdU5UxUKUwU6UBAU9U+UKUFUWUJUrUJUzyU8UTUMU6UHUA6UcUlKUVBU3Ub:c+cIKSlD9+AItp49Wsyayf2d164dEKQT
TLSH
T184F1BBA3C77EB86B606C196F1D45B80D197AB8325192A8F4DB97933CF0C19F71B1242A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7925ea2f3e89de8338bf617a49ec31d554c38bbccb6ead70a3a6a5d0459a7f4f
MD5 a3a18eaeea8069d2c404b965a3794398
SHA1 4a9efe78cf9901497da31e26108b55b008552adb
SHA512 8ecfb62d662f60da543369dca1f499b2b7496bed618ccad0b9da4d1ad370f495286f90da74a894ff926c461939ae4ba5e230b85eb210f4f209b21822f6a44343
SSDEEP 192:sxR8Vmbx/fPsCtDde5lS7zoA8pSx/g6+WNIYCNCuOlGLIgIJ:sxRo4x/fPsCtc5lv2/5ICes
TLSH
T11732C715AA28A93B8CCBD20DBB557F53D6FD5032A1902E58F7FC961C14EAADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 31KB
SHA256 705bcf96937553d3ee8be9b48e4e44750ba1454eed930531821faf7793726db6
MD5 f13a9342b3d17927ce5fbdf2653404cd
SHA1 c84bdfd5f8dc837ca03cbc13d17da0f592443705
SHA512 85bf1cd43f38fcf239b5fa290d545aaddfffa13201e37d6226f67e56b0305bf5cd0f022aeec0dfafdf2fffcb743eb894d9556cf11d4d472c7fc91d03fc6541d9
SSDEEP 384:sxRGQm4x/fPsaX66s8qMpRiYnazAW8pZS15posJWeT+jc5l8LYYi/51Fc38eIFS:sqQm4x/frX4Mnc7WeT+jEl8i/5+8vFS
TLSH
T18AE218059814C87B9BC79D18A83D7E33EAAC506266C5DEDE56ECCA1C00DE1FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a3a026d61eced8c17257d849516dbbd028479b0fd3705f215f42091fc994387d
MD5 6732e77170ffcfe6bb6b00cb6d65256f
SHA1 f8ef68989558748f2119682494039d6ce64e54b2
SHA512 8b54d7d6a0a5865fc33a2696b17581256652bbee7958a42fb3ca1e9f67baf4fa3cbd369d7b1d1e6ed66cec3ce6b871e2161f8bf49c5a9950d65e74a5ac59f922
SSDEEP 192:sxRZVmbx/fPsatDde5lS7zoA8pSx/g6+WNIYCNCuOlGLIgDHJ:sxRT4x/fPsatc5lv2/5ICel
TLSH
T19432C715AE28A93B8CCBD20DBB55BF53D6FD5032A1902E58F7FC961C14EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 af982eb314bd7f9fa54f02be5641d68531dc6caf7014a76aa3ecc65a5ab30be3
MD5 b2b5b69cbd33c5e070679a0fbc204b76
SHA1 c1f53dad144727785f915aef14563ce74a586dda
SHA512 5648088e059488f6a97dbbb0723d29bbca17906a2ce6b09469122ce2e6f26120a7a75eb96ab51c796b6dede81d089ffecbb1aaae7ca3bac3a079c46bc5288683
SSDEEP 192:sxRZVmbx/fPsaODde5lS7zoA8pSx/g6+WNIYC/WuOlGLIgDZJ:sxRT4x/fPsaOc5lv2/5IUef
TLSH
T11842C815AA28693B8CCBD60DBB55BF53E2FD5032A1902E58A7FC971C14EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 743c045f3b438f21e1786ed649ec4b25067412256a27797cf6849c050ddb001f
MD5 d4c675c77943fac866c1d5f62dfd86cb
SHA1 1e9c7a7f28b42e699dae13dbc7164a391e3efef2
SHA512 0b6a3b34bfe98b6e58738944f16a105ef1f204d3fc1d86d8b0133aaf3ecddb58fae50607620360e313ea12c6b5f89c67ceabdd9d9b5cfdf04c0db9680816cc02
SSDEEP 768:syEIQm4x/frX4Mnc7WeT+jElbQPFA5H/Z59m4:NQm4RIMmWpElbQP0HB59z
TLSH
T17D03F8429414C87B9AC79D2CA93D7E33DAAC505299C5CEEE5AECC91C009E2FD6F07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 7c3e875906234fd441ade4ad2f776efade47a157df75803e4bd7cf6e166ef273
MD5 e453517c7a3183440edf6f5d4cc34f9f
SHA1 9ef1133ab16316ce800901dad1ed816afb25ff88
SHA512 d6fa5c05c25164266a46f6281b69a4f552c49f5dd6b4f8ea27d9b96094612e96fce7876652b53317751e72f402cc31d57d77cd6844dff228ef64c14768a466ed
SSDEEP 768:sOKcm4x/frX4Mnc7WeT+jElbQHqu5OB+5aFS:Ocm4RIMmWpElbQHNOA5cS
TLSH
T1F1F219429814C87B9BC79D18A83D7E33DAAC50625AC5DEDE56ECCA1C00DE1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 91fe0fe4acc8aa538380a9bbd75134ddbdd4edee05ac1f53c84d61dcf3df27b8
MD5 d218cc148c68c8400fc182b0357c6d80
SHA1 3338bac04d88ceb861c8bc081e4a402ec1993ff3
SHA512 3ff7d3dfbe38f2a215e667fd2ad4477e7717eda10ef8240cbfec0331b0d53dfc6c68ee67c39b5cd7f5ccf6956bc7936d8bcbde4514ca6b689d8120a68c2b8866
SSDEEP 768:snZ+Qm4x/frX4Mnc7WeT+jElbQFQu5g7+59m4:hQm4RIMmWpElbQFrgS59z
TLSH
T18CF208429814C87B9AC79D1CA93D7E33DAAC506299C5DEEE5AECC91C009E1FD6F07813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c3431650c1e430390a13dbd9d555f317e7f901d95ce4fa19c4f5a3f57b004da0
MD5 c709158e43f00b811c442eb6956c35d6
SHA1 685b855f67b7440555fa5efaf9400dab019b08b3
SHA512 e20ebd5dd18fcfb89cf9150f64bd41bf78baa32ddc107597e0bfb8611ab201824fe9474cf24b93d1adfc803610c21574ae4d4a745a4accaad3a0966870bca22d
SSDEEP 192:sxRZVmGOx/fPsaODde5lSfObCWoA8pJIx/g6+WNP7E/YC6WuOlGLIgDZJ:sxRThOx/fPsaOc5lK9G/5A/Def
TLSH
T1D652E9069928693B5CCBD61DBA55BF53E6FC5032A0902E58E7FCDB1C04E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 be5bc21f0b98e74e68361ae2473d4ff27c4a64b32e538503ab8df414cf17f229
MD5 b390bb0ca15df36c6f6b0247593c709d
SHA1 7e640595292aca6b3c551d4154558a3f755d5769
SHA512 6643e73a979f3514c6aaccc7897f834cf49c236d697c0c2b8a4f008b9c7404a9465af37242d041fb92a5cbb551b0a7d6896a51eb537b6cf70d32ad54ba441563
SSDEEP 768:syE+Qm4x/frX4Mnc7WeT+jElbQqQu5uE+59m4:rQm4RIMmWpElbQqruH59z
TLSH
T15FF209429814C87B9AC79D2CA93D7E33DAAC50529A85DEDE5AECC91C00DE1FD6F07813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 42598cb258ff832cd6e22aadfec60b9667d24d3bee0803e7e51c6a794c450db4
MD5 75d77365451e9926fb2355e41d83304b
SHA1 a85940210ca59eaa7b99af34ea0164d1a26e020c
SHA512 09d265b9f13f18918d0df98d893dc9fab2d4513c79fb6287148ed3d19fd446ac83d6b225276ddb530cb9a3cb617143abe057f4c2fd31abdbb4682776458d1ca2
SSDEEP 192:sxRZVmHcB1x/fPsaODde5lS66ybCjVoA8pXG7AE/g6+WNi17EHIR/YCPWuOlGLIA:sxRTQm1x/fPsaOc5lGPYi/5PM/0e45S
TLSH
T1427208029928597B8CCBD619FE25BF62E6FC503299911E5CA7FCDA1C04EB6DD2307807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 39KB
SHA256 137e518c8237d5bbe983ce0d943666af85fa8873cf71f044f234d6835587f65f
MD5 57acd54ffa2e8886329ddac25206bc38
SHA1 8ac40f9bb7cb2e5be01dc1ec715030891394882f
SHA512 406af839b3af4bd7bc2edb5e6ba09b302f77eff59c066ff7e09a9ca0192186f21a9f7faca56b59701bca7f5e926c6056b1fed12b1d3fcbbea9e628d4cffde9c8
SSDEEP 768:syEIHm4x/frX4Mnc7WeT+jElbQnjA5YiiZ59m4:NHm4RIMmWpElbQnKB059z
TLSH
T1170309429410C87B8AC79D28B93D7E36D6AC505299C5CEEE6AECDD1C00DE2FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 d2d0d26f4c191c74a074146f0ee0fe8d46b98325ffbbd8b1920d01da5d490c20
MD5 e17e2cce967d4da57dd77a8a0b0419cb
SHA1 cb13bd344d422f51c26c66ad3a44908432f78469
SHA512 9c2f42e52e0c827e1ba8a4c5b2864f41fd7120b665a24f8b10846b31ad98658f69d31182fd1a6cc8f9ddf13de1d1e570a535d18c04b31d4cbbc88e51001e7216
SSDEEP 768:suQm4x/frX4Mnc7WeT+jElbQSZu5EUvFS:NQm4RIMmWpElbQSiEqS
TLSH
T182E218429824C87B9AC79D28A83D7E33E6AC505256C5DEDE56ECCE1C00DE1FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a1d31c2731c52a49482e6e2c7a2102e1d1200e200d541bb13c5b8075e48da5f6
MD5 7699ea25d49af6a9772982d97f9fda3b
SHA1 1b0d337d592c472b04fe65673c9294a7b1f9609d
SHA512 466dc676383a8b948edf4afca3415d9b7f5f0ae2aaac368ee5ffcb52fa22c41d011b9580e0a55140f79bdeb9dd58f45aba73515c2e7064388e3aba9661cfd598
SSDEEP 384:sxRGQm4x/fPsaOc5lePYpY/5ceQZ0e45S:sqQm4x/frOElep/5c70vS
TLSH
T17472F8129928597B8CCBD619FE25BF23E6FC503298915E5CA7FCDA1C04EA6DD2307807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 a9f1bc6b6a1642755d6243b6320f7f3138c549854baf651617c4eeff3c69856c
MD5 fe475dd8f02f2af403fded0bc827b4a8
SHA1 8164f09155f40783ed2c1beef52d3de4d05f2719
SHA512 155457eb34f0aa07214ff36eeb877bae96a6d8b66255c354ab7c6c7b8a20836086ab906f22a1234d6059fcbbe86475ca123a45a248bf871dd47a131c2fdfb667
SSDEEP 192:sxReVmG2cB4x/fPsaODde5lS2ZbRjVoA8pw6VdA6z/g6+WNiktagGA7EH7bdYCXC:sxRGh2m4x/fPsaOc5lfLYN/50Fndne0S
TLSH
T17172F7429928597B8CCBD51DFE25BF62E6FC502299901E5CA7FCDA1C04EA6ED2307807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5e541d27816d4d981d822bee1efa7604ab18cec60611f7e19512429c8cfa043b
MD5 ca2989c3caa3c03941e7d54eeae3ec3a
SHA1 ba2aa8fb984e40b42893738eb7c7b009a8f2ea70
SHA512 076310afbbfd8e6e52ed66e81a7d3597a9f803835f2166d7eca7e28fa219f0af97959ace672136992ea75b50eb4b1bd73f65e4ccc914e7a3771d30ef2bda69e2
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvhroZSE:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0V5
TLSH
T1B7B2DA2B600DCB7F4F800AADEC596FD76DA802CB97589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\249bb1f9-bf31-470d-8672-5cd7818d4986\index-dir\the-real-index
Size 2KB
SHA256 080367e10befe2efd34af6c570b67ec576415886db028fa3ea86e9e969f1bdfd
MD5 a7130a019942ba3b284faec9a09318df
SHA1 5425b6196eb29bb3852716ba3775f891a6f31676
SHA512 2a12828b3f01044d5101122a33a2130b9b71723c0caf37515cc99b0c9259f6262f088466283ffc7c1d597596d05db2d8b0bf5e2c868e648acdeda1731fbacb32
TLSH
T15551854CCC80A79ED87160B92D8424B247752C34FC59C391C1D8B2B134036B55B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe6c7142.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\249bb1f9-bf31-470d-8672-5cd7818d4986\index-dir\the-real-index~RFe6c7142.TMP
Size 48B
SHA256 fcd00f20dbe2e0d3e025111c73a4de3e287f692cc594a0a737ff690b269b6262
MD5 0501e30a311d6b9a24de886a0c4ae3c8
SHA1 e789205f525d601f215aaa82a4c96e63456b98b1
SHA512 43dcc2cfb14742afd555b9cc8b495a65c57ec0320d69b4b4d166cec5b913d321fa2389a6981552f0d6c9e9966fc00800223ced805f4c87b691b53cfe9454d7cc
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\89522080-190a-4b0b-b900-b6c9edd07e8b\index-dir\the-real-index
Size 576B
SHA256 f9394f901fff4c937aa985784d5bf82fcdd9883ec8c58e36d81fdf621b07def5
MD5 053328b2b7b1360ed1523e2779cc15a2
SHA1 c6c32db12c906a1117abc44f507650e729db299f
SHA512 a662eeca9445d058ae54931a37646cb05a13237d0449875a254d079c79a625fa9a2b444ab90e253554fc026e1175d0e18088fda799f77d3bb869d6f729e9b24e
TLSH
T1D8F0F1546BC0991ECF13FBB00D9708D13336D8BF4685972B217490A7FA2F6020D54F40
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe6c505c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\89522080-190a-4b0b-b900-b6c9edd07e8b\index-dir\the-real-index~RFe6c505c.TMP
Size 48B
SHA256 4f98b06cb7cd8c7295990e52482f209f7c0b67a2fc8ca0b87d4821018ac3d2fb
MD5 635d503fe8ac82cd4b67f3f2d3c6781c
SHA1 ee1edd802b8a6122e75393c28cb8157be5c8b70d
SHA512 9255e3bb62b0c62fdcbf3aff38c634c692ad9bfb9d7522a077af2a1bfa0526f1a2626a9605dfbe9bcf2f5e0aa4fe94c0d6dccf1d70b791eb9f8a5c65b87eee8c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 1bcffa9ea967a83b7399b81cc384e553eb945bcbc76a4cb59c9eaf896592f216
MD5 4816b0a96df7a417064667bb19cd1d11
SHA1 f2b494248f4e6ad4ece5234f75fc276934ff1fe5
SHA512 ebde1171ddeba8232ca1f9736c31d3f5ebc70d70b8ee9e3dcee52913975fb554efe121fa66be6549934c113f0e6004b185070640e9be6a7a38c2aa912986d6cd
TLSH
T150D022EB8731880E1B38EB841438698C821ECE0DDA8ADCFCDC4CB04330BC603C802978
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 242B
SHA256 53874c8bc2f7c5c96ab5080bbb0219ae59f6713e0e4cbd9b399e7c9c8d14d182
MD5 9ce9128ce682f03c5076728e0a825ee6
SHA1 7f3e4ba286dcea83ab8261fadb0b1ec49537cbb6
SHA512 7ee4222e6466f9c6c8fc61b346ea0a1ba3a25cd27c0dba79a6ffa3a51aa87adbceb57c3fe5444afff3058e4185ac0f69c12a0d03ee9b8a6e8a0dc78d7470fabb
TLSH
T1D1D0A7D76A30414D06788BD57434B5AD821EBC8CCC86DCFD95947195317C803C416934
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 67d527f8470ff1a2371f67147fde4743aa79642c1e673483bda95033bacc79a0
MD5 57c48a895504ed9ee53ec0fcb22b9d6f
SHA1 de00233f12a493153e78ecebb484f8ae177b65d8
SHA512 ede85a48d76848cd100a0016f2a93a3669e89db351e7848a8d6f6ee4d06034d10d01afdd2f20fe418333b33d56e9cca916c674651ca029257752ec762de0d9af
TLSH
T164D0A7DB6E61418D06349BD47424F9AD820FA48CCC8AECFDDA84519633B9803D411934
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 241827adf074691a8ab306dd18dbba13448201dd0c19ffc9e1b64f744c3af1f4
MD5 249abdcf32ca473af41da3d50dd13342
SHA1 40cea9288428def57153cb496b21b2dbcc865d90
SHA512 01f8f2dd4882861c9e36fcab7757443288cf71be92d928130b6460ed1cf04336c4b2c3d0b296bda2edf7ba5f7070400389bf225d93e9f2825f4071aebb9d0688
TLSH
T190C092EB9A20858E0A38EBC92038BA5DD20F824CC8CACCFCE04CA147313D9138802975
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe6bede9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe6bede9.TMP
Size 137B
SHA256 e0ecf335c23838d46572f715247ff7de4372307c440279113a3796b901c062ef
MD5 c64f0446ef2c9ddab96cacd760ee0cc4
SHA1 f9f0c59dac8b3f842cbb6ffa9b63c3735f775f2c
SHA512 c486fe5e499eb1dbf70dbf800b15c8df451266cefec6a3ba673bab8e3c7a32ecffc4d19f1fb461617e35ffc2f5035a054be89b53b223358e52f47809ab6a5313
TLSH
T19BC092EB4A30858E0B35ABCA6038AA8DD21F8E4DCCCACCF8E049B147313D913C901975
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c81f4d5-e380-408e-b691-5bf83d910874\index-dir\the-real-index
Size 72B
SHA256 15eae96ae775c239c51aab6f4ab76030742f059c4426742e1a1dc2874eda8a51
MD5 b7ec13535df2947318a7b3848ce2ec45
SHA1 2e9adc90964dae96588781676fbdc177f4350e96
SHA512 e3e1d7fa070dd974cea91a6d97d7c03acd84ecc35552be78ddacf65121033bd7019ebc733c771fddd894b3c37e003615b60b553e5576d78f53ad4973863c7752
TLSH
T161A002A511D84417C110527424C235612332ED10ED45135751E60789DF94575C227450
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c81f4d5-e380-408e-b691-5bf83d910874\index-dir\the-real-index
Size 72B
SHA256 a80e7c7f9f7d65004badf54138c46d00bdd2d8147baf102bff2a3a15f2b3a434
MD5 4e599269e6cbd20aa4f89342826cd076
SHA1 2cf833a89c2f677adc110fb4cc5515e375281b6d
SHA512 e027fdfdc96aaf623ad719660cfcf30c521e1a9dbcfc70bdc7fa776f05e203bf8ad8990eb61acb5c367a95ba46ed22162e2374604e0653be7513e0a00f88b71d
TLSH
T11BA0021A41DC1447D010267524C1A26137326D10B99A135361D1438C89A45754223154
MD5 SHA1 SHA512 TLSH

Submit Download

7b1b59698c1ba902_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9c797712-0a6a-4343-b72c-3a4f84ecf63d\7b1b59698c1ba902_0
Size 61KB
SHA256 da005a435f33a5e5baa0952abc0faeb7865d1625be404ea7503b51e005c56999
MD5 1410f59042961474c86b96ef7a6790b7
SHA1 c54df51a336591415e9991f13afb560cec081c8f
SHA512 f137739832f40aa33b16f4836c48550f7358fdbe1d4fec3b4fbd0c5e790183c9eb8b8ef4680a3f9aa450411e1d81299e34ffbdf4d882f40973122fe79f42f9e7
SSDEEP 1536:UkpFISIyI9a4OQw4JfCS+ksYyiApR+M0Dpbarcjj90dLwXXHPwqpzGybB:UkFISIyI9a4I48bC6Rx0DNDrpbB
TLSH
T11F532AA7B2626035C7AC11D5A49A7F01F12B17461948C9ECF0BD66513B18E8B63B3BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9c797712-0a6a-4343-b72c-3a4f84ecf63d\index-dir\the-real-index
Size 72B
SHA256 8ec5f4c8f7a3ad2544fd285d6b220801f8db318b2b0f51abb2adfdc6bdac7f93
MD5 6231bd1d5931119d5f53ef717d5d1acc
SHA1 abcad6426f8f2a91d57ac1b67d3679e15d3e895b
SHA512 6060d2aeadb7ba7d5c2bbf4d2f0cdf1b94e1a76027e8878aa7870203985e7a01d4974477f6c9995c65b2ec4409289c3d202baa8dcac31e1aa8c54d2140faaf9c
TLSH
T151A0027101D09713C0052778104AF5503294ED30891253C964D00496CDB51C65191116
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9c797712-0a6a-4343-b72c-3a4f84ecf63d\index-dir\the-real-index
Size 72B
SHA256 32984fe262ea05c876bef205aed1fb516591048bd32f9d398a7d93ab69f1236d
MD5 7fa9dd5f138c6bfa822f1f2160fb32b0
SHA1 da3367b1fa5c869f9e3c45ec7549641f49ad0c88
SHA512 bc4cd2376bbf2e8e8d7f640b61128c9a1aa3a44a01b102f9c3afe6c828a7fc85ce34c6c07ff7a22f413137105c14937e1c3440fef8078fc1a15473f738fa0da1
TLSH
T13AA0027101E1DF12C12673F92055D9547290C9308561178D61D00194C9651D3498205A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9c797712-0a6a-4343-b72c-3a4f84ecf63d\index-dir\the-real-index
Size 72B
SHA256 9863262150134b547c6cbbaff4ee82a6095c98588d68656fc573fa1026087600
MD5 39e4948d7fc1351db1f4c09109f4801f
SHA1 fac78a4b8fb8f872c643bf3c027a7c0369d8e035
SHA512 3a64a50e22142b891b3c378761c5e92ebd3a1a152dbc1531ee256d7910afe8ac3dc29aeb9afa42d81c4a86683073f5f0473a9ebb8545312d2696a9afa7375737
TLSH
T1FBA0026801D44163D301177C51C63264E210DD30E513438556B01748CB911AB4143007
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5af108.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9c797712-0a6a-4343-b72c-3a4f84ecf63d\index-dir\the-real-index~RFe5af108.TMP
Size 72B
SHA256 acdbb43bae46ddcc24928e181f2c2524e45734310fe107980ec3a1497526735b
MD5 010979c7d7a815d1147c733751d28709
SHA1 5edf0f9965c01141f64a7f3e84d989607752295a
SHA512 9b158f10b551286ff41f23d9d4e59c728341b8aa74dbb835568004e77db204d5d490eece1c329417c6f5049fcbeb31cc2c7a00dd6112209470806b49295b0c7d
TLSH
T10BA002740BE13806D10407BA548513601210CCA0541043624191004CCDE5287458900A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bea5e835-dca1-459d-ae63-b51b091cc721\index-dir\the-real-index
Size 72B
SHA256 6792d473028b2d9451e4acb6abe12bb78cb634135676272459a11d032456c353
MD5 b49f09a2be28ac33bf0f92293c39e7f5
SHA1 c2e6f3f62580d3a766f0d3d9d199eebc07b81044
SHA512 39607b399f0f3788bbdabb35a116026b1b7aad00954f3d188f8ead1c2a0519a46a408194e700e7e469919268cdbfdedc1c351962d2871596e625cb08431f02de
TLSH
T18CA002FC0154431DF0011274A84169D1A3BCDD25220506DBC3E0406A89A434076074CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bea5e835-dca1-459d-ae63-b51b091cc721\index-dir\the-real-index
Size 72B
SHA256 a962101675e75f0a803aad23cfb01969beb36249ce68a06f56c9f2c7b20d8994
MD5 1b795320157386e6fda4816e9ff6f0c0
SHA1 19c9decf01a318d04d555ff38ec6becf6bfff34f
SHA512 97e26f7643a4428f4ba7555dd8b62147192f5c1ce2781e7b5ae363ba7846e893f96e5a6650131d1d56326fa01d5b20ef565fc6071365d0aadff86851d67a7133
TLSH
T122A002A00154456DE4551E7524C37E50E2186D3A1153164AC390B9758E917C15A43068
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5f6e63.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bea5e835-dca1-459d-ae63-b51b091cc721\index-dir\the-real-index~RFe5f6e63.TMP
Size 48B
SHA256 fee800155702704b6d349d59667f332fd582dd79804e25871371d7f444c1a218
MD5 d3917c9b29b835124848b1b075494381
SHA1 2a921380f60ea40b0a98f8c298278275de5c9b17
SHA512 3090d4a7f25a4bfc323ae2cb0cd4bdde69f6a15db1e8ff44b9d7548ec7c96f19da16130afe10d71c2121715aede7d0b3acdb43e1a569033cf47e4806480081be
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ea2484c8-9185-4449-8bab-47514f2837fc\index-dir\the-real-index
Size 264B
SHA256 10e272c1559773c9aea2de70925e8f75aade5f6e720e31a66edb9f20e11d2e5d
MD5 0a2b7b231f57433d5ba1d343e75a391d
SHA1 6144885e4070103b101897129e727024d9ae49c3
SHA512 c2540cd52e56fb105c11a5c497093e17fa1a5b0b527f1395b3baff3b841e5938dc1d39f1cb0f4ee298a33424080a95e944ceb75b9a13200bfe53a6e341a0c462
TLSH
T184D023CD8C328995DE1B187504B32914373603FD3509FF25107D102F595567C5046518
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a9694.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ea2484c8-9185-4449-8bab-47514f2837fc\index-dir\the-real-index~RFe5a9694.TMP
Size 264B
SHA256 1aebc668306c47dd7907fa2fdaf910f836bb32ae325e02ed58b618011f0c6997
MD5 851c50d737b528be32f90df22ca25846
SHA1 9cbc5f0eea91e13391d283f944c04159452c6310
SHA512 ff0621e0764e343274959177fc35b709820f1fef6bcfce29226f53534fa9ea6a557cc323e3a0e6102b1580e96a3d8c4ed4d7e59517be5f1b11455cd9223b4572
TLSH
T17ED022CA44A2A9A1EA1F19382003EA19333B082C2416BE2221AD142F08302EC444320A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 618719f239997eb3ddf17ba5e8555580da540a204b640b0bb2d8a9675f987c60
MD5 c61f7d69a5cb7c5ef62d6d581087931d
SHA1 c0ff9fbe8bba22670dbccc6bce15a8e3b166ab33
SHA512 0db89343f2bacb279fc028ee497aba7f5819938d1c4c10ce3ab69c53ee7fd6d94d39932e8eedbafa6a0483f9c524325c67a554896ce1835d313bae9200285cd7
TLSH
T19AE0C0763EEB1C10AC5FD3EE1071446001043D408C96BD4E185B81C364723B03407C67
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 5a3fecc8a42c59433ea709ec3213b08c73739d012dc0ee4c24c3ecceb7cd7215
MD5 6a6707ca7cfda90dc23c78966cb14440
SHA1 3e419f76570de7f7db03df3a4290611d31bb758c
SHA512 2868eee451894bbe7d0d9936f011aacb348075f4728427c1983e470ee8dd3de560496f74dafd7a81380d0e74b8dc77ab97e6f7f362c2e7d3c0dfbdc8444768fc
TLSH
T169F05C7B3FF71C14BC5BD3EA107144A009043D50C99AFC5E1817F5C3A4B2368245EC66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 a88914f553a5c6107b6b33a5de81c6fa8c17c5d439582c260b39529ca00ccfc7
MD5 47cd61cf12ae5af43969596fe40f61cd
SHA1 f99255b72aa6cb5a63ba6c97c859c4a4172b8f39
SHA512 303b4510d02e58a10e7297baaf8c6b71dbc7c2a06f85f89ab18dabd4bb185a962254c94de902e283a45c067fbe6755fe07e2fbad443655cf979a3dce272b6d80
TLSH
T1EEF05C773FF71C14BC5BD3EE107150A049057D50C9A9FC5E5C1695C3A4B23A8249EC66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 3140e46c8da47b21fbef17b15ac911e351161a89e4e942b8aba39fbee08eaf68
MD5 8a285fce7e18c1aae14136671dded244
SHA1 e9669aa9e9b0b950160eaf9aa68fef97d84cd183
SHA512 1348fe752227281f4de619add15d012c186f63ff036563cb9ee65f7344e5a3fded8f9ab388d8f1df58d4fafcf2d8db51cf0c659589ac8a05855536d2cd3b0a37
TLSH
T129F05C773FF71C14BD5BD3EB107140A04A053D50C9A9FC5F4C169983A4B2378249ED66
MD5 SHA1 SHA512 TLSH

Submit Download

4cb013792b196a35_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0
Size 127KB
SHA256 98f399d11d4e066c827ed547ae19ead17f3c1468452c2ec73c34ba6530a4afe5
MD5 120cb2e5a92bb1df4490333de1634e74
SHA1 0d3f2818b898a69ae8ff489bb6e5ac25da5b41fc
SHA512 09b8fd84b88921839272ce0f742d5331496dee077fd43396852461a413e2680454fc3a23df55bd2685c313b373e37990f9bbd02c7c79527893960e1185a8ce82
SSDEEP 3072:69w59B4xPCx1C4Ke3ThL/A25/Ax0gL/tL/vL/dL/yL/df2WD:69wtzhL/jFAx0gL/tL/vL/dL/yL/df
TLSH
T140D3AA32769D509B0E8ABAB45056B50392BD7467B8449038F244A7FC25DBFB013FEEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cb013792b196a35_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1
Size 222KB
SHA256 bfbb997f1e597e2783a49c03ea0a8b15aba1cf070e642d501d0fd512db72e06d
MD5 1ee0398a019d6f34d9d0113d6c8c105a
SHA1 12c84744e84a7f969b2a4c2bfa22087ad5692d33
SHA512 90f3854cf688230898b3d841a9d3f7b5e9108060f1d469af21d172df256ed84de54973a77615d5bfa313b60ee2bc7b45ea4d8d290e624ede32596e225631fa2b
SSDEEP 6144:5Lm8AjiWNA4Ps7vF3feKJG+X1ddL1Bcf2KL/aEpZZbRigVd4X7t15l/YdvL/sL/L:9AiB8L/hpg/YdvL/sL/fL/vL/EL/QD
TLSH
T17E241A26236521EFCE1993B911639A1377B8400AFEC3D27DA5419334186FBF35ADBD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 bb84df7b67727a09da3f6cda2926fcf2233f25fbf678bbb90c27aacc9356c4e2
MD5 c30bd91e546fccd63151e3a0387410f2
SHA1 d62c4908e25b3a756618fdd5f6c9fa6a97054396
SHA512 d92dcc003c75d04999661986d720cbe090f1544dd33f29c22a4aaa96bf453e12003f1ec2d2be8f6ea443d4297f71583620603800ead82a64015352784b310323
TLSH
T1F6C092478E19A000C41803B2AB32A04C26229BB98058336D54A480ABF96B060044252A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 7155d6823f8cfbfacb2e4cb90e72aef596d5a7647d960a672c497d4142e1e795
MD5 676ea25c8c1c58187d77a073c4403b60
SHA1 bb8e635add63a9a27c431e326c754643020c80e8
SHA512 0a230d6d66cc2f876f0dec73395944b95c357cec7147a6da140bbfa7eb9098816a06bc6be274986c7fd058b20b134b01405f829e10dc7fac7aea57856db75b95
TLSH
T18BA0025DCF4E904AC44223B129B5218D2A55CFA88919AE1988A81047CA935458596172
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 c357232f59e75d43fcdcd214d6b245d50682c2b303d62b7c3945591a9ecd016f
MD5 752ac7345eae2139fd46b67cb155c9a0
SHA1 6826972ef5ac005543ff6667a2922073832413ff
SHA512 bbd9ffbb40edafe0bf9ad6d0a02aa1a7c8871fed75979a61b93f0a79156035ec86889cbc0aa908f2ef37a30fe079214fec4467145dd9a7435a39302576e6fd29
TLSH
T132B00267DF1EA042C1D253F0F9F5608C36628FFD8F16366688FC8476CDD925055A24B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aefa1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5aefa1.TMP
Size 48B
SHA256 9c09ee21e492cb8a5280c96bebcb4fcafe83e5844c434eda60b5f0ef0932aa32
MD5 7191f23a0ca001bc5f7eb01975369e22
SHA1 13afa3dcde9b2e67f6b69c6122847e396e7e1760
SHA512 5332191959d34d3f70b5f66be97d482f7ac0213ecb4dcc7e06a6a7e4c32d4e289813f0f02cd25b29c88679e10e4634f374cf398833fe1b1722746d2e92a6ad0b
MD5 SHA1 SHA512

Submit Download

9448bddd2d4fe934_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\9448bddd2d4fe934_0
Size 63KB
SHA256 0e764809bf0fbf837248dc6fbbb8dd11b2a4415fb6506329c2e02eb4e3ea07f9
MD5 158b25842cbca12209560b9796fda9b8
SHA1 1b388743fec6aef82c5fa60ad0bc3098c5f2dc86
SHA512 154c76092da513f59934fe5da9a1854b984ac5375604532b352303db288fc58a2970cba67940f5b3a1524dd2d81a5828e4b8f69fb946ce8a84fef258aac5c0da
SSDEEP 1536:y8k3vI6lZbRXxyqxn4Y473+KrYF03iRNjkv:y8k3vFpxh4Y473qW
TLSH
T138536BA6377178B3427BA1B1906F130B713EE5A7F40484F8A198EDF45E44AA60267F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 38be4fc8c40421a2779298588ab9cb65738ddf733d7eb2e27e39d3aaaff0b523
MD5 9524ae2f711ff036144a9d30f0aa97d8
SHA1 191481ca754a5270ced96043f4aedd975174a349
SHA512 72f5d0ac35042f8ac851e746ebd1c9cc84876b5f4db60de46807d6b7d3615f179c9e348e74c7fb5ac3b4761f1bdafeae5d3fe0f44859cf298c4f796dcc625157
TLSH
T198A002D413C02496C11023B43A8293512736991103018A4646DE48C9C8992929509A45
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\b777f21d-5f50-49aa-b5c6-24ee30927187\index-dir\the-real-index
Size 72B
SHA256 2aecd69fe2182e38ecd18d78ada3b453db66b3dc56bae340417f666e522b91a9
MD5 36d2f7482b4fd3f0fec92ff8076b6c27
SHA1 0647267049b7e318394d3a7ec1b4b71f72122c66
SHA512 7f1dc7f8e029104b7cd7c5556f842e93d5acfd92ff869ff2b074ca396c5d2f7b2a39fa5f475e8b2000f2ae916a4894975da01199d8491b6f4c0fce815ac623b4
TLSH
T12AA0023C06D80303D48812BC6447166936316951FF050312C9D46198D8E5195950B13D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe61ca16.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\b777f21d-5f50-49aa-b5c6-24ee30927187\index-dir\the-real-index~RFe61ca16.TMP
Size 48B
SHA256 93eab4fa5356b849d6486c155b289222e07ff43a2f287df3d22bc2197e58f6ac
MD5 9144c20e0716b0fa70a8ac625123ef12
SHA1 44d65278907bd074b8043e7e403650372b1b0bdb
SHA512 32dfab3b77c267a40f405e3658b8cf1577e6492db3c7df29222fd5af919fec599ee4796ac1bf4c1ceec1899477a1253306b16473aa7181fcc0d18aefd8121e08
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 97B
SHA256 5e776b38a51fd3bc4cacb4fd4df76fe905be08cec6a2de04b9ed8d4a32e267f9
MD5 914480ed3f2d31f454d0d8e29fd7f2a4
SHA1 3a5df01cb90dd8173eac558671d3e623df1340de
SHA512 606ab755da680e3235e94e7343e93a3238a8c6d995732bc8608951cab64b84971c8298ee42e8175fc1363cb5e0606f7dbb3919ab4c85340472317050b942c85f
TLSH
T19FB002AF5504C05F4B706AD05550715DE04B134F4CC5DDF88C4894513125BBB6D02D53
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 178B
SHA256 8bcb1c8bd514bf1560f7e81d7c762d5815ef64b5e7fdf8b460165c3f8923c2ee
MD5 a767f081a5ef17af186f874e35eac229
SHA1 78203ea7e7e771f96b2c630245a2342f4370936b
SHA512 33ff2c78b340fe8b8f7457d05b840d96b81ab0e8f2be9d520bff3889f995a1c72cc8cba5161d5b7ae53078f52f4592d172a2b2ad0c382128e035cb8edc6b9620
TLSH
T13DC080DB1550444FCF7156C0A560315DD21F4E0A4CC4DCFCC84C7013303497B5E01966
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 172B
SHA256 1a709b4fc293d54a030524e8b2eb706f80525c6e919eea6fe05e8e3da7ecfd58
MD5 b4d497249adb2c1542ef67246b6c3b0f
SHA1 b22923ffc9dfdc076e45a4d366dda40be3a55e8f
SHA512 8c306c4997078c879ffcf79658bba90d0b479586f0550a80c3bbc5a3ff277e5802b68797ab9861ddbecb28845ac05141d94e305493efe8bfc802f4dde55ee103
TLSH
T129C08C9B2690944FCE71ABC099A0326DE20B834A4CD5DCFCC88C402330B4A7B2E0296A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe617791.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe617791.TMP
Size 181B
SHA256 ee49185d855e1193f1847a3afcfd74bca4d8784d103a0036e843d648e773db50
MD5 1e1909f4143e1bc342e867ab4658e4c6
SHA1 d0bc4b581fc45806df3036e4d06e23f6a757a696
SHA512 0b5e0831eac0a1f069c6812a4b58b50f9d11837b4004379c1b100a0d1ad4803a99167b93093c094acdf67f4324060fe7e6eeac8e9119a7a92cd4dec1c7c55fc3
TLSH
T115C012EA4125804A0BA0A6915920314CD4471B0A5CC4D8BC8855B092643475BAE42962
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\6\CacheStorage\8cd487b5-8d85-41b8-ac45-87fe714f865c\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\6\CacheStorage\8cd487b5-8d85-41b8-ac45-87fe714f865c\index-dir\the-real-index
Size 120B
SHA256 1d74a784d5a9159875f7379c66fb7e6446ff592951345fdff0a861238ff7f09a
MD5 71de67c18edc1b135c02e21f9540b671
SHA1 7a274c26226180925d4ac786c5093b4d7da5cb17
SHA512 8a71e99c624d406e4b39e75656b060e39cec373fdc78aac1142b03583004a466ef48be0c2cae1309a60910187d40dcf2cdec7c0c1bb2824196d5630949fedf3f
TLSH
T140B0122880A04726C80502B428D6113736242E225A1E231B40D41690A0831A94611070
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe6979cc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\6\CacheStorage\8cd487b5-8d85-41b8-ac45-87fe714f865c\index-dir\the-real-index~RFe6979cc.TMP
Size 48B
SHA256 043abf98dd67086344215ab5ef7bf63c5c7fcafd6a5f088e1bf230b0c250cc30
MD5 b6671d13528ed8ce1c2672663325ca16
SHA1 692db61b4a80e1b4e9f9d3f7bab3f20613098454
SHA512 789fe21fe48f2894802d92e77aa25ba8dc043ed7e0a9ececd57d9dc1f191a5ae7974ddfe88358adf63aaa8ddc9b0911a0e5e9dbeba34f8d9d10c69e7ab09aa16
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\6\CacheStorage\index.txt
Size 178B
SHA256 f4187c12b065bd3373b59c094742573ca4240a4fa307d954ff18dee774b71e4d
MD5 83ca9ac7ec88724e0666e87b8ecbc966
SHA1 9405316b42cc578d6c717780a4e2ef2b6f269aed
SHA512 89399e409e0f2bf210e779c36c3846fc2e0e46df7d49080a5a2d42842c7487a474ec078fcfa86e5a9c1600f7abd5f0fae2071b155e133cbf70b8ea5f5b560dda
TLSH
T1E3C012EF5222805E077095E45510B14CC15A1E4A9CC4D8F8CA40B45130346275911E13
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\6\CacheStorage\index.txt
Size 94B
SHA256 3b86c4cca55ed3961d4140e33eb927766c7cc5178d47a996310fcac154738d06
MD5 0d8497a767939eabb2c570f988af50b1
SHA1 c900a4139ebb67c6611fdcee8ffb19501d731f12
SHA512 e5853f2120fb2e8cc0919cfa161aec644fb6f25147e26d77d47c0ee65d81d7791f95a68feaf91eeac413a440bebff89ea1d15e3fdb4c27d2280027bfdd90c7de
TLSH
T1DEB002EB1504D05F0A7155E42450715DD55B115D5CC4CDF9C945646531256771D15C13
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\6\CacheStorage\index.txt
Size 175B
SHA256 2b78cd9eac00db2e05ae32fc37780d2f1d27508ca92fa539d37dce792290db62
MD5 50b8374dd1ed5e5c100ff7dade780a4a
SHA1 f6b0c3ced6b36f7ea95934af1fd33b4a71c714e1
SHA512 413c7c82b9ad53e9dcac0b5dc64b258f3ca7c84b3bfa655856e5caa47134dfcd3218a713d8fbd30e9e965e926c334ba7ec0ad6031103309df2c6b6421f4b8891
TLSH
T10DC08CDB2424858F0BB257E46434798DE25B1E1E8CC4CDFC9989B012B078A774E00D2B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\6\CacheStorage\index.txt
Size 169B
SHA256 40377fe02bd0813b1cd71984a782acf388b9191a02f041b18e6319f7493cad59
MD5 41fb061eda3fef6a14aea198f45c6899
SHA1 8fcd13f6740c31ab91f86bdbf9d8471898aeb8e8
SHA512 6446052159fc66cca813d59cf54ad02c1529bc2b5c5bab888398f03217d964bf949cea92d6ac22f975ad0daf2f38286fad74b4bdbad5dda73e01372081da04d7
TLSH
T1E7C08CDB2414C58F0BB197E86438795DE20B020DCCC4CCFD99889022707897B0E01D2B
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\blob_storage\a0e6f8f5-75d2-424e-850f-2eee39503391\0
Size 9.6MB
SHA256 85cd5fff9ac77669b11c7ca1d7e99ace0d522d84eaab60b48ad3d81abccf12ef
MD5 4b466cec00d245b1cc640dd22bcce949
SHA1 c38bf7c2eff731fc843faee6956f36ed6ca1fe31
SHA512 85b6bd49244c7a3960be8c272bfb7a915a0419830806f04f4a68d4259e6873f64c74d9c61975db892c6bf97cd04ee68f87fe5072a51dca64a6a924148b365513
SSDEEP 49152:uFzQBQyyB1MEGVXadYarf5EEBo4Ubh9ZztOTszJ4NkuYHEHfzSPt12TtFPakZDxQ:J
TLSH
T11FA68DA1F9E025B9FACFEA4E140E7F01536F3B23A922985BD6390B8013077DE1956D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d21b3da1-db3f-42cd-a568-2c9d9f14d6f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d21b3da1-db3f-42cd-a568-2c9d9f14d6f4.tmp
Size 22KB
SHA256 e482e0287f5d53c3ba44f707953029fd78a279155339825c80835c329a77ac98
MD5 c349164cd27e763456564bba6d4ced8d
SHA1 081af2cb261854522b6712ab8e0340eaeb01ea0b
SHA512 a24eeaabe2490e290180b02f40b4ca6138c60b7e8916b334f2ad0cb5fe1483bb97cfa581edb09860dbd044810cd390d855aa365138be3d96ad8dc1773ca37f7a
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uj:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAe
TLSH
T1B3A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a578128f5b7d258fd6c9be9dda4d14b85cd4722f18582b1431cf48959a389a38
MD5 828d50d570cfcabd81bb7b9209294c63
SHA1 70b4f124fca0f16b681f986cd13650f3bcf74059
SHA512 d2d589193617d7b3360129bd82f9df1eac5f89db0a94774e013353e19e7040150dd89949d51875add3c273e4ec14d1832668983c3eac578d1a530f0fca7863cf
SSDEEP 768:Va3c+trOexp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:Va3Dv8+p3Z6n4yfTd3k
TLSH
T1E3F2BF72E8A4AD738CFAD744F24A3703AEF8456396C05ED4D4DD7B1D108A1AE530B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 56146266c901d773e76d7bc5344b692a66893fbce1a9211c61fb80e6d265699c
MD5 60351fc40b6c9f94bae87b4a9de4108a
SHA1 38552a2f0789355f967422b2199aaf694978fe2a
SHA512 451b12ab06b7ac817d37430da566a6fcf39a6bc8c5c0d1fc0ac4615f1599f29cfabd7ad286774b48427b2c5ff9b78f996043132255f5fa2a5465a41f64a56c85
SSDEEP 768:WFK13Iwg2atrOtJp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:h13/38+p3Z6n4yfTd3k
TLSH
T179135BF288D79976DCAD8747A33D2E029EBCC163B5805994B7C86A1DDC460BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 757fbe2c0d397c38c11a25b0ab47b0a1a0f744c2ed51c1e4a5eda67c58e8bd2b
MD5 91ba53e0178603b50d2c4a029e5b7a4c
SHA1 1a3f9eb079e7ee574939e9dc77ccc1be001e1e9d
SHA512 5445cbe6e1ae8bdc0af54843abbd85ebbf52dd01f20c1d2ea565d4d860528e47f6030c44c0ceb9301fa089849ff09a392697f7d9dec67b0afdba64c455ecf6f2
SSDEEP 768:9a3l+trOexp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:9a38v8+p3Z6n4yfTd3k
TLSH
T185F2BF72D8A49D774CFAD744F24A3703AEF8456396C05ED4D4DD7B1D10CA1AE530B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e75162a09d0d8a59469e9ec8d26e97670a6d8f114cc804779f57dfd7547275ea
MD5 8c838090121184d086ccc848c7a0d651
SHA1 106c5685e295de40b47e54b4d5415f1e9a5f1c64
SHA512 2212123626e7997ea934a6ee04f9fbb54700aafb6940c44b5747afb5dc6b71cb24507530e4a417501153164e32f9ed1660b912050f05843ee82f55eecc41e914
SSDEEP 768:nrv+4UNbdR3G+trOeEp8+p3bd66j+4BRv86aLIWpaUFF:nbsb33tS8+p3Z6n4yfaO
TLSH
T1C503AE32F8A8A9738CF6C644B24736437FF851A395C01ED4D8DD7B5E459A0AE630B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 526d04a20eb4d070f769142ac068334028ba6b92ad715bd2642563352d994d0b
MD5 0f6a5e8b8aa82c1657bdf7de09bfe189
SHA1 06f3ddc194c5295fa79ebc4e9974599a13ab35cd
SHA512 a9cd7464144a460d13bd7cba94443cdcdf1f7570505d5907feeb81330638ceac6938fdd4a57b3dc9317e5725b1cf1366be9cac156e6ec1f6e7873ff622e5b125
SSDEEP 768:WFHH3IwgDatrOtzp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:aH38F8+p3Z6n4yfTd3k
TLSH
T145135BF288D79976C8AD8747A37D2E025EBCC163B5805994B7C86A1DDC460BFD30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 05edbbc01c75e207b34028f5578de6c0ecead6c4b8eba0d51c894bae2b53d853
MD5 dda3067d3a073ce36f57161d1fbbc298
SHA1 291edf18729c9298da2f6ad66aa10ca603983c55
SHA512 97d14628aa4d54e6c47be85240a3b3c9f7b0a9ba240b45588d5b0ed9a8e7e6b9e873a06af1448e00a9920c43423215c0bd7a5f3ae9e21a583c244f29807b0204
SSDEEP 768:WFrL3ZwggatrOtzp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:UL3EF8+p3Z6n4yfTd3k
TLSH
T11E135BF288D79976D8AD8747A37D3E025EBCC163B5805994B7C86A1DDC860BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 b1084ed9712542566d2501bc13d266d027b7df6121118146d54df946f69158da
MD5 dd0fe4727bd7e70f39dc5671e900a8f6
SHA1 c02d8817b95ae3803599b85a2ee119bc3e2b8121
SHA512 3a4514de15e299e8c975229c452c3021f3aa8cc9d42c9307b4d1992846869fc6d8122d1c3daa5339c1f2402dccee03046f76687af3600723546ea7393307bf1d
SSDEEP 768:WF+03xwgd6trOtap8+p3bd66j+4BRv86aLIWRhy6DqY3Zy:103jE8+p3Z6n4yHTd3k
TLSH
T10E135BF288D79976D8AD8747A37D3E025EBCC153B5805994B7C86A1DDC860BFC30B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 cdf3813f07a18daee6c9f8db0952086018804c0e0711e2a09a86ceae440ad4ae
MD5 b14db92882c988fe55f196702243f06d
SHA1 3351779f011ca98dfac4755f46dc171559d98e2a
SHA512 53be6727267d37ae09ba5ca06b0e659d893edf63735f176ce2f4b20eba7923ffa3796453584988c951844f0024f253ea4b8a402d0f697c094ba15a04a9c8b58a
SSDEEP 768:WFpY33wgfCtrOtgp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:+Y3D+8+p3Z6n4yfTd3k
TLSH
T1CA135BF288D79976D8AD8747A37D3E025EBCC163B5805994B7C86A1DDC860BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 820d56a7740124f2ff9f2d5fbb2658362907e9aeb914b4ef4ca4a766168996e7
MD5 02489dbcaf855dfb2edbcc70e18517c4
SHA1 4a12328f8219bef18247b6eaa9fb8de1ac975403
SHA512 c1ba2c6eb17712f39ff0f3f650544fadf0e5b397bc96805574e331bd3e07a09832aa0c22919c14239f12fe4f28e04e4366f31a08a252a30e0f3e724761532209
SSDEEP 768:WF/p33wgCCtrOtSp8+p3bd66j+4BRv86aLIWRhy6DqY3Zy:0p3ss8+p3Z6n4yHTd3k
TLSH
T1F7135BF288D79976D8AD8747A37D3E025EBCC153B5805994B7C86A1DDC860BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d6bb94dc3dd2ed629c1205d6071fb27ac2d6e00c79267d909bb07d5ca3e16ee2
MD5 b020f93bc017eaa9791fb46a1395895e
SHA1 7850abceec405d64569dc43313ebd3bbf5fb4199
SHA512 bb9f451b9fb26c4d5317e7d74b6e6af6a9665878d798b8be40b35e21aca5c1abd9781a93cb294b0b2b435b9ae8e29d882332e91b7206295359ad53829c5e8b1a
SSDEEP 768:Irv+4UNbdD3Mctr0Np8+p3bd66j+4BRv86aLIiX2bwCl1:Ibsbp3OL8+p3Z6n4yB0ww
TLSH
T1D603BE33E8A899739CF6C644B24677437FF851A396C10EC4E4DD2B4E419A19E630BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 07e2bea1395eab6bf348470ed27e9f08b16b52136e1bd4e6577c456ee30df20e
MD5 55db9c9fa703a002ae48bd1763d78f34
SHA1 74e132da7d1ceb2a7c4a4280d6a70c97788a43f1
SHA512 b22e9689e9f917811cc66f27edbbfa984b63553b339428d1f28f12b3c9a958c035c286a94320bd79db1373271a54048d6a37a2fd8ff3bc2f24c2170256f67d61
SSDEEP 768:Orv+4UNbdD3FMtrOeNp8+p3bd66j+4BRv86aLITp2bwCl1:Obsbp36L8+p3Z6n4yA0ww
TLSH
T1EF03BF72E468A9739CF6C644B24677437FF851A396C10ED0E8DD3B4E019A19E630BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 51080036b4ad140d7805fe1dff9cd608bdefec5cfd050cc1610f668cc31b8445
MD5 5dc828fa9d114b90bbd09a6883dd630e
SHA1 1082bb50da61e3c169dfa277631656ab82ea6034
SHA512 e55bb176ebfd6981cc42092d155f7412a6cb103563217d7273c2c83f2bca8b08323a79e42390600f3eca95ad28446cb8430f9dd10ed49cdf043be772314227e7
SSDEEP 768:WFTH3ZwgjatrOtbp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:gH3F98+p3Z6n4yfTd3k
TLSH
T17F135BF288D79976D8AD8747A37D3E025EBCC163B5805994B7C8661DDC860BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 14322908cec4129af4b576acffbc240e7cfba99b9bf366f9cc480e8ba30e1415
MD5 5b9f14a6cfd14bf01d11740a32afad84
SHA1 cd6bc33f52d658b2ec3bd883b2303ca7b0f4a85c
SHA512 5eb8985b00ec289eb537c08c474d45141bcecba6ca5f2a8cad405ebf15c906876437efeb60b146f99d7896e604ebf68580f82c24875da2a5a53ca604674e56e1
SSDEEP 768:WFJa3ZwgKKtrOtCp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:Ka3qc8+p3Z6n4yfTd3k
TLSH
T115135BF288D79976D8AD8747A37D3E025EBCC163B5805994B7C86A1DDC860BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 16028ad328555e74984df283a733e4b968ade086cd1ef0881004ac0b9e77b46d
MD5 35f49595e0eeb47818f4f94c0dbf7a77
SHA1 d7a0e3c70ed7012b48561808205801f81fc56458
SHA512 09210850747e992953134a7a2a76ef38b513eeeb7d1c4704dfb6da32ce5c2e17cb063a8ad382a80d86a2516763aae3f3425903ac27873561a016edb9f5ac5627
SSDEEP 768:WFXj3ZwgSGtrOt1p8+p3bd66j+4BRv86aLIWphy6DqY3Zy:gj3mD8+p3Z6n4yfTd3k
TLSH
T1FF135BF288D79976D8AD8747A37D3E025EBCC153B5805994B7C86A1DDC860BFC30B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 6eba169f4973e71582742ce475c9819bc2a1b6591437b2dfa2179ee90b777b73
MD5 7bd76c9a0fd9559576597b826fe9b903
SHA1 9de15b9b2fa34ad69fce199248e66b6235e8d89f
SHA512 01c8d696d788b49eeac869726f151b5a260b7e47815571ad72b5f5577f72280817fb3e35e3b1175b1c8081eb3f2fa1bae57098e8fac352b3e41de4caa14e1a6c
SSDEEP 768:WFQZ3XwgeZgtrO7p8+p3bd66j+4BRv86aLIWphy6DqY3Zy:dZ3o8+p3Z6n4yfTd3k
TLSH
T19C135BF288D79976CCAD8747A37D2E029EBCC163B5805994B7C86A1DDC460BFD30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 7e6d87a70a42795d6d10e5f75504598c6d132c35fc96f3f3c51e7beea3963205
MD5 fc1465919f2cd6915ec824904eeacf70
SHA1 24a034c7ee36fabf89c63df68d7929dce70b7d1c
SHA512 14f0c4bab0ee55a903b1e1e1bc14859589fe0da305728ce07679dbd3bde5a6222f337262c0932ec02cc9a1b3abd574b5b009f416f9eef811533a94e7fcb61b16
SSDEEP 768:WFvc3ZwgKatrOthp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:oc3Kf8+p3Z6n4yfTd3k
TLSH
T171135BF288D79976D8AD8747A37D3E025EBCC163B5805994B7C86A1DDC860BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 8735cb28a8f75a0087c4cd7861fd6116c36bfc27915c0903e135c1588dfb6705
MD5 2a3ea224f711c38705d1b8f1a55b050b
SHA1 af426458f2f9d43aecd4ac2a1b8ac22cae62db1c
SHA512 03066311154d586051d08d47af195808b8f062db481dc65efa6c0db1d454dbeca11a1fd7a94f0cd66ecb37f1c8df9a03bc9e6c675ef9b3f89ea5a4cb85f57d8f
SSDEEP 768:WFfp3Zwg8atrOtZp8+p3bd66j+4BRv86aLIWphy6DqY3Zy:sp3oH8+p3Z6n4yfTd3k
TLSH
T1ED135BF288D79977D8AD8747A37D2E025EBCC163B5805994B7C86A1DDC860BFC30B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b4a67e18f503534fd1f5afafcee78ea3dc9199e3d2443def18922614f67b9146
MD5 fb738ef2150b607cc9234966f92bd2e2
SHA1 c9f71acdd573220b672a0a39f6c7fec1f2ee4d40
SHA512 309037fc4fa841b5e12d906a0e773e45e00d46d6240fab029cfcdebd62854e3aef245152826ee7ecd91720b6e6e98b0c23f5caf745a1f2d023125bc952c8014d
TLSH
T13AE09201E700010AC0680370008B0F60AFC4C1A10172070F2B30205C6C333063F20BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 888ce68cf1adbed2c02c5df8390bf566e450a80fd23befda8cf22f5798f3f929
MD5 e607085c83b45cf0ca024c6c217989bc
SHA1 85e4af93ebca2d6b84fa32eec80a99d0d42d482f
SHA512 391cfd64724cb90cc6b742dc2f510ede3d0f718dd23cead28de49a552fdf493573bdb859a3d86fe2e94525257916cc40335d31346c188b52b869691a9a9c7468
TLSH
T1DDE0C942A76408EBD4B95371904B1FA4DFF6C8370372034B9B30142CAC32B563F245C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2d21915e077d04e7d3911b12cc9ad18e5440fa54bcabebfd499979e3efff699c
MD5 f317868df0bc7501351dda570dc31980
SHA1 186f23439d861fe06ba6c8e2ee7d7b4533570b0e
SHA512 a7c4ca78d33d88b9c1b0ae1764c0d1eb71ea3a4d0de870a357f3fdaa69548c907795323237f7981497011c359c353b559e7f61ba3f9165d418a36b19c7bc815c
TLSH
T1EAE0C951A76508EBD0B95331904B5FA4DFF6C8660271434B9B31146CAC32B963F245D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ab9d5ca668fffb453b9d57488b9ab5ee883dc079d45cc048675c9c4020089be3
MD5 ffb8ebe73ccab655663dc16d7b3b58fc
SHA1 8c39285b08e72afab4735b5e788eeba093cbd681
SHA512 ee3074656a6102b8ce3766ae5140739028fc49c8e22ad8f5bfad5fcaa6a223f51946066270c76f9b15d0581957e371fb01fcfacf641188572e0d99f16520b493
TLSH
T1BDE0A796A36414BFC4785332804B1F90DFF9C42A02B1034F4B3100AC5C32B413F359C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3452a47758ec983b44f8b40082656c3f6578ac572cf47cf10bf176c31a3dcf15
MD5 7352ba01f3dad0556c6d26ec12ae07f4
SHA1 5a7aea70f0833f55ccd3ef4ea895acf711493190
SHA512 88fc0568568c21997ab578613a350d64f27299c93a75972ba8ba3989d40bba4efb68de27af690ecbcec04bcf9b304a11a29280ceb32c3606842017ea0e6fa04c
TLSH
T1AFE0C7A3136800AAD5A8433280CB0F50BEFAC03A02B2060E6B3114BC2E21B843E31A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 90bcfef00d08279fabd0b3a9391e38174be981e185360170e614e42229496f03
MD5 e0a6d709d6c406bbeb63ab7e98ab5fd0
SHA1 6ad95041a1549cfa341b3db412fe57bae012bee6
SHA512 44f1fb424ea88f2f2aa691f4a10cb7736cf11acfaee217eb03bb21b1222cfaea1313fde27220fc3054cd15693bcfd9d5c141053da69e8d473543572fd6a1542f
TLSH
T1A5E08C67636840ABC5A9433280DB6F10BDFAD47516B30A1E5B35187C2D20B843E35E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 51d82fc2efe74df310f5b7d05e47815a3a5334cfcdc504e622cb98c0a3293176
MD5 111e8f68c90252737abc8fefda8c6e9f
SHA1 1d6b54003bd1700a76d55adb172364ca95be210b
SHA512 0af01995c49c783981531c407434a2ffb4423a94220a774860d6afe6b1d6a1bc5658cde3d3921a050a90c796e5734dcf7c8cd0e91ef0bdf5f7c7a2d9f7b30b2e
TLSH
T1BDE0EA53AB6440ABC4BD1770919B2F74AFE6C47612B2174B9F31402CAD337953F35691
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 719206786ddc5104450e883bdbfcae0e317d39c9ea8417a4d8065f6eb666ba0b
MD5 498407ccdb5aa2bf9702633606844f2d
SHA1 bd9044420809e8802cf912b421fe5c2cf5f31e27
SHA512 ddf8c9a922cfbfc11832bf6f0b58cdb96d7bb2fcb341b1dcddaf45ea0a6b6f8f47b55585e5849a4cec79db3512db43ebfc825e848e0ab52b1fa3b8c895f13435
TLSH
T1D7E05EA7677814BAD5A94336808B1F50FEFA942612F2060E6B3504AC2D31B953E35B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a4d46d1a10567aa88b2966c7045419d32f436fd957a31efccbbe13c24506f1dd
MD5 69bf630724ac98b1d72b6f72cd87723f
SHA1 a44a3ce720e563eb2d5741c0124d2f03b1476ec6
SHA512 ebab3f4a74e5943c3e9d99f461a88f577d17f3574012f7183223706a6380db62f2dde31317e2736263ba4ac9c13a5d06901351ac90439ad7ad9b54a91d00e2f4
TLSH
T192E05E67637814BAD1B95336804B1F51EEF9D42B02B2020E5B3104AC2D31B853E35A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9f77d2606467c7525b93a91d4ccf70d1151ae49978507e9e9f23a449afadbdc7
MD5 2ec0513e9d2054a7e06d5788ceb5abb2
SHA1 84cfe0bc321e5b811c0dace95d0f39c017fd7778
SHA512 240e28af253422333cc05a8b0dba90f6617f948008d40377292beb97e0bc1313f40ab126229a68e35621b8c98bd82150e8d992d519316d6593a711fd0bc710ab
TLSH
T195E05EA7577814FAD4A94336808B1F50FEFAD42602F2061E6B3504AC6E71B953E35F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0a966c70442a1a4412e425e6983a811cc8a96f74c695c0d09ace05e1fd8d40f1
MD5 93f0ff5f8027de03669fb6d460e4709b
SHA1 506798b6170818db07daa75ca6a9970ddb4f0133
SHA512 e02a7662c4d5e4822310979729c92096ccc7fd178ab6251b7368c2f895a9374ea32c46a4c173f16e7c0ea01ed9258fb24ad2066896d936f661def72fc7ed057f
TLSH
T1EDE00912EB14016AD0A913B211871FA4AFE9C2A612B21B0B6B71516CAD3331A7F61BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1b1e6b9d6c5c40ce08b5c20e536dd34047e1af8b1ca6e575eca07ec7e835b111
MD5 b06c4e94b1fb538e55fe6d6f7ab127f7
SHA1 e1a2f68714cf5197889dd076aa7f613b93ed1a52
SHA512 205d2f1150fa47808fae428832268ffbcf3e52886d0eaab8631207b19c927648141abeb68a2c2ee06245ceea7a9fb9e6270398d4273c1a6afaaba4d6daa78bc5
TLSH
T16EE04802E71002ABC1AD037001CF0F78BFE5C5A602B2170B6B30205CAD3331A3F24AA0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 70a1a316fbcf27088d47c31fb3d269b09fa9b76397a7bacb4035b5f4be7acbe8
MD5 f6a65fe8bafd7b5e5711dd872ce68c2f
SHA1 3aa61b094d2c0bb774f8ad744486040cc60dfe8e
SHA512 15bd28604784be8843a4715d50bac5d3d6fbf166ebbcfe945fd4353c10b94d4cc1370346b2f6b0bda9cc171dd45df6d0cb0c6d54344ac056171e29ea76fe0208
TLSH
T1C5E0EA13AB64419BC4AD0770519B2F74AFE6C46612B2170B9B31402CAD32B553F25691
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 97beaa426d37774518b66106b8c3f32bb5aace799426384f469174d8159411d3
MD5 ed041501e0490ebf92811cf65c00f712
SHA1 69bc1118a3bb55d47780f4718a47633061bcaaae
SHA512 12798e237735ee54d1630b35ecd486302e109c7f3d23025dc8c0cfdbeb4c38f9956ebe08f4940734d8dfb59c020cb9027a39f8338ec67e367a88517dcae3f34d
TLSH
T1A3E0C982A76000DAC4B90370504B1F74EFF2C1360232034B9B34041CAC327963F296C1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ad2983f6d5ac146884f6946bdd8e470fcc823ca8566cac82e8c1d952dce439d4
MD5 c91ef61922be51cca6c65b5ef0f9cbd4
SHA1 6739c54f3d30939a8f2f61fea51c62f1ff405cf8
SHA512 64562faeaa078a20ca8370805f9a680dd1b184a10e11baba11682506b1e4a917fea0ddc7aa3d87239458b541af9e0d0490dfec7905a058f70a7be30501a28146
TLSH
T167E0C982A720049AC4BA1371904B1FB4EFF6C8370332034B9B34142CAC32B963F295C1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1deee076a6145d2f89afae8548178aab57ef10ee0ff6836bcbfb6070f57db904
MD5 c31d0f9976efaf695b063bb01cc01819
SHA1 a43f2b0695d8fe839507d31e1bafd61c51dbc0a9
SHA512 df85e2f64958cff73f506f45bce10e604fcc53c702ffdab35a1a6adf9fcc96454fb9e667fc1235a6aac0d63bcfc5da7bfeb8e196e7684dd174d11b406b51152e
TLSH
T1A7E05EA7A36414BAC4785336804B1F50EEFAC42A02B2034E4B3100AC2C31B413E35AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 97287363fa1bb65f7a7ce762b7053ea9c9a1afd79741b343927e39d039d0769e
MD5 ab597743f821fc13be8947efac1dae7a
SHA1 442fcf25cbb76c6297214d9d9a2eb95b14b13c3d
SHA512 cb8da85c2c636cadcbbc127c21c7721e8300c418d663f3d7ec6a78d04203cd6d9d6003125c131d298f766a63efe617ee1955e2daeb23b00d22a686eefb85174e
TLSH
T125E0C26753A840BFC5A8433180CB0F10BCFAD03502B30A1E6B35147C1D20B843E35E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b8d782929355aee528469e8955d73947dc574d150ecca1a21afa22d1ed1b8b8e
MD5 17cdb61c55803bbe08a5ee6baef84d9f
SHA1 73ebcf8d73b42d9649eb11351ed3a85bf8971548
SHA512 8f0c4bd770bbe4c2126f05aa697f1f4512cb76c9eb57b2aac8eb8d78315a980037bbc70e216f0914b5ff4d99647a9df1d241c4e2eaf5fb2635fb853b618c29e8
TLSH
T112E00215F7040156D454137111471F40AFE9C0A512721B076B71416CBD333113C22790
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2428fc8e79e2c343a34017fd9608b225150fe0e3140d340b274b11cd6d81f8bc
MD5 cd74a5b83ff7fcf9a45f64cfe1fed050
SHA1 c51b520729a36bdc549468eb4c83227ba051fc08
SHA512 46e7c05c7dafc384cddf1ec928cb15c43f16c01675201f0b0dd909d1bd187a736793547456474792a9b59acd8966ad7683404b278d75def2dcfbc4abd00abdf6
TLSH
T17BE00115E714026AD0A913B211871FA0AFE9C2A512B21B0F6B71516CBD3331A7E61B90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f175f1fa56f6b7d2c0518ae54f9b9c0b249d77fa8ae2340545f6aa382baf50c7
MD5 3ad59c70bccd0ffc2b7861452fe89432
SHA1 a99a51df39a5dcccbc6a1175362789e88d9e2991
SHA512 bcdf9f77313b7f6c2c6d403bd7d4adda80e9eb79539ff7581665dc5bdf2ac2ff9407a3659b8c8289635c9200f1a7e1fa22bf7e6d999bface1944c0721d2c66f0
TLSH
T1EFE0C26753A840AFC5A9433180CB2F10BDFAD03513B30A1E1B35147C1D20B843E34E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 298dc18529ca93b3ea976d56b4184daf82e897652258c4a0c8ad0012ecec211d
MD5 08c03b529a20a17c0325bced4344d0fb
SHA1 ef21755d25f4dfb0df793ab5d205df0c96ae78f6
SHA512 33d14d34c4e87e6869e0bcb3257e96775acbcd740b2ee57f99414766c62722eb284c1be8cdfec95df065564aa2a3ab4d5bbccb9270ab225b84909e80bb134022
TLSH
T130E0021197040056D454137110431F40AFE9C06512721B076B30416C9D333113C21750
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8e04e9c64833b62e54e8522d362793eb9c18d3a9003e095a3fb1ad6a9b99f452
MD5 6de67871886c4814491f9b682e549ef9
SHA1 e1900b493a2df769bd9ecc86388ad816a6930156
SHA512 501a4adab031f4469e40ec006df69cfc2fc9778cea19862bbdb06f6a1b493b28fb2c2fa7a0789087cc7346e447165264ca3da103d49eaafa6e0a0345cddf68ac
TLSH
T1E3E04802FB2402ABC5AD037041CB0F74BFE6C5A602B2170B6B30606CAD3371A3F34AA0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d236e3c1cc6810f1d7b6e2ee9efa7b5efb67d7309220a822a044bdd6d3d9d921
MD5 71aa08429a7abae4b5f097e8a03c59cd
SHA1 43588984d912c59f1a255b45d1d4cfe7af370c4b
SHA512 96d4f25d405cb6d23a50a72ee09582acf2483347437d69875f0acae2c6fa331ae8dfac45e18aa34e612f015027b8c02299e79f23cb22782a04ba390ac47a6054
TLSH
T1C7E00103BB2402ABC5AD0370418B0F74BFE6C4A602B2170B6B31506C9D3271A3F34AA1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f998325832e6e340f2eff43429354088df2678eaca0b06426761d5aac517ecdc
MD5 f4ba1942a6243e9784e1994ccc300b28
SHA1 d5f6b4d3086b14a9795d8ce356911c4c8fe62aba
SHA512 3070921c6ece8ea8ac90a849bae51a208631d71163db7f59b72b5b71051c23494cde812ff894c4f6cb5f94bb9d87f17d6a08f570a54dca8fc14f903dbcc71809
TLSH
T182E00213AB1401ABC4AD0370519B2F74BFE6C46502B2170B9B31502C6D327593F34AD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4043d24f98bc3d1f433cd3f2e9389dd322144fa1eadc1c505a3a82c0148d1219
MD5 2ab0ec616d537032af55d080031c4aea
SHA1 10f1c776d5524037b7fddcf0d821c92b0992c2fd
SHA512 e8f5cab50866a139152460831e8f639f4ce2f8c3e91d04c6fe0204d34acf34b599d7cfe2c318b33bff317f72a6843cfee444a405b29951630fe6342610e15a7e
TLSH
T171E0C992A76508EFC4B95331904B5FA5DFFAC86A02B2434F9B31146CAC32B923F359D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2c805e7e785d78f349376db78f0f559ea46c9eaaa28adab25b627e735480ed64
MD5 20374a0c68bef5cdf0edf421830db943
SHA1 8ff312d1ccaa76b7d276fcb5d6085f43560c9da5
SHA512 fba01b218c86c3581d71e47d1898647f491b06840c76d37a33e75da58ec778cdf5317c64e697897fd7c1cf5357f5f0e2972c81e4ec7d334a13b2b88dd4a3fed1
TLSH
T1B0E0C22B63A891EFC4AD433280D76F10FDF9C87516B30A1E5B35187C2D20B943E29E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 313764b8eacbfd12d5d27aaa0c955aedece5467e59117931c53e4ee45330f820
MD5 39d559c05d4008e0c48fa70f5e78f404
SHA1 fb791b74fdf5d52c34155fc47ce01885ce773c02
SHA512 86e36f593b5e959c4326a6c307b33e9535ef65cbee88b8917fb24fa826904ed5404ab9af4f8dd644ed4504e1bc4832ba817623d0b3be4bf1ff390708a18d1146
TLSH
T19DE0CA82A760009AC0B90370804B2F74AFE2C0320232034B9F30002CAC33B923F29680
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 42a9980a2257220b81309284e1910d22342cf5249f0b891dfa97851d02e091f7
MD5 34cd1c96bbf79040025a6f3e40f5a4aa
SHA1 0774461ebaf0a4fcfe0b542afe18373add12833e
SHA512 4e6032993dd2058c405e351d3ad70fd6cab2e835cd2a6da9079023514b0bc762e7968240503e9ba30ecbeb0f5469c865fd2683636c9110fb527c968f48ac20e5
TLSH
T174E09202E700019AC06C0370018B0F60AFD6C1B101B20B0F2F30205C6C3330A3F20F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 721ad6bf96e3dc5abe1bc28ed97e6c9ba23f49ab160d8c7de4374b4c658e5022
MD5 fa12ff5d7b59b9019f8f56f3e032e883
SHA1 8c91e2a96c1886a8082c5f061315733ede1613ac
SHA512 f924d94aae75e340c95e169af5bd1a7da214f7f4577ff65914f01f6e7a446fc015dc3600403292769b6dae989fecc1cf65d07793317fd0ec9d4028714ea641a7
TLSH
T169E00400D7040017D054137110431740F7F4C05513731F07531041745D133111C30740
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7f3ed5220caed32ba62a7c99145c2a8e826ac9f391b8bb12084c9f5c0d721018
MD5 1e5bb81641d1cf6ac9ccdcb6241e7325
SHA1 55d276e06131a161f5702ea51e259c91c31b0888
SHA512 257c9de296463de24d3edccbf7848d55bdde32bf5d740135ad8f627ab54697272218ee244ce38018831e785fda3a27fef66582f7b318263b84631a1b3b7b3140
TLSH
T13AE00215F7040166D458137111471F50AFE9C0B512B21B076F71416CBD333117D72F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5b223a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b223a.TMP
Size 392B
SHA256 6958699acd2e732362e2cba5cd44da6f11b056896acddbfb59c5f1c8bde56fde
MD5 4a817c5fbb9c6d8a7d529056a3c5df3b
SHA1 0b2e4e5f7b439c9132121889785cbb3afc25f9f9
SHA512 8b7d689c1c87f23d92ccb9fc3a8c955157046e8662a3f1bb05901f22fdabd440f13bc2706227c713fec79f49c0681901e7f57246fb674968a4f1588c656e3ad3
MD5 SHA1 SHA512

Submit Download

9e3af68e-9cfe-47e0-999c-81db0016da2e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9e3af68e-9cfe-47e0-999c-81db0016da2e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3816_1817034979\CRX_INSTALL\content.js
Size 870B
SHA256 62eb994f6e82d1122d542cbc7cf2cd640cd92ef0698ca257d3bc3ee4cfc1c8f6
MD5 2fe72fe8f838667e667bb06d5a630116
SHA1 a7ea80d06ef75741456743f81e1bd73d23b7302d
SHA512 44862911efb58d721b1d42dc334db90c76371daea4d63d9ad46957ab0feabfea9dae6e71dc2572088e29000e9eca6449b2b2c358daf9ba2293726554647d2f19
TLSH
T17C11E3A621250130843F816FE33BBADAAB3026637165754710CF8848CC50E9387A6CC7
MD5 SHA1 SHA512 TLSH

Submit Download

rules.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3816_1817034979\CRX_INSTALL\rules.json
Size 441B
SHA256 4afd75b69e86da633cc0ea15abaa93a58042c2cd6faceefa53324f0ffe3bbe2d
MD5 ed680d3f7142cc5340c3932aa9b43ce1
SHA1 ce005a3ba699efcd2ba766842b6b2ac817bee9af
SHA512 9255b718e959019388051728fa6700b5ea5b265cfddfd3ccf419680a80db337ab174ada7bb13d16b2155c97d20b5f5bb57e69d8fe96273238c675d2788781ce6
TLSH
T1E2F0E591CA756C3742C6B238A5D5420061B092576A50AC2E3C8D499E8FCE13D96723CE
MD5 SHA1 SHA512 TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Avoid.zip

Path C:\Users\Admin\Downloads\Avoid.zip
Size 241KB
SHA256 8a9d0115b56f9a6a8ed231d3400e1362425e265e5944a0ec0903a70e888ab171
MD5 19851e369fc50763189442e3c6694712
SHA1 d2e47f277743f3c4253bc2ce85bb40cc67c87b8f
SHA512 f79ba6f1219f8e10cadc3a4a5c8ab2051affe3b9bf7a4edaed505dd3acddcd57327f6cb1f728e37a74a78d685a9bd244313a629cdffea58a219a7eb4615f31de
SSDEEP 6144:GGI0XrI4z5qS/4YiSA79KR4zc8r8FL7KFKz6wlXhH:pvX0ABd09KqzcZL+FKzHxH
TLSH
T19C34237DB289B7C7B8D02FAEC052720DC347516AE395E3A2A6580CE7F727474B49291C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Vista.zip

Path C:\Users\Admin\Downloads\Vista.zip
Size 1.9MB
SHA256 5d444a9088d2bc42d888d97d84bc74001c61c4324bdc5611e17dba3226e1ac1d
MD5 809d0fb04beeba2fcd97520adc64de5a
SHA1 a7aef4e35940f7d4e3bd45860e2e41a2a50742b2
SHA512 1342715472635bdcc4fe3823683dd3648b4c6e1bca5be37a838db2a47b2dbc9813ea82364c6cc7f2e9db4620ccc690fee079772e058d1bc59791534a44fe0a15
SSDEEP 49152:SSSOMTXntBo9suOp7swFg/qGe9Tfs+5+wA/K5:ShTXtBo+Vp7sOywAC5
TLSH
T1FA953328B9D09505811BDF4D94FB1B08F72E36A307BE6CBA55A53B78A7376103AC81DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WindowsUpdate.zip

Path C:\Users\Admin\Downloads\WindowsUpdate.zip
Size 603KB
SHA256 1c7476c3a7a83ae1afb6b7c00a34c0e117bd31fa4ffd7b0f890e0c90587a95a8
MD5 d39389492bab27ae228b7bf147167ecf
SHA1 652a4ab9f09826964925f69b951813c29ba0f7d6
SHA512 d731cacb28e6982667efde3b161fb02ed87609cddabca5552bb59de3eec6f51f7041bfba99a0d1dc52d4fb5c943b5042395983104953ba4370b6eb4c93f60ebe
SSDEEP 12288:1x721tKI6xPgUzJD27SrpjpvzSn3UP/3rnU4Gew1HFK0um/GbRxocdYE:1o1cI6zDrvzd3rU48Ff/K
TLSH
T11ED423C525008DEFC6F98B7DBE702B278F777058161A11D8FA417618460B7FBE49392A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

virussign.com_20250409_LimitedFree.zip

Path C:\Users\Admin\Downloads\virussign.com_20250409_LimitedFree.zip
Size 47.5MB
SHA256 78839bcc292dab6a5586d6e102aae7657706184ea3cd5a53ab5a6d5cec969e28
MD5 714ef4ab4d4a02145331baf9ed355c9f
SHA1 c1d7792488b7321d21d1139c5fad82bc101f7aad
SHA512 212b6750bc0e8d0c07bd8a5263d59438f6e79a9703154b44451b8ca1dd54e2f90c1b5f87141aff7f0faca2b4bd54e9a43d7891a71cd008501f814fcf51c52685
SSDEEP 786432:gE5g9AiAEM8E5g9hH1//w0DNA3hAzFVTE5g9bRE5g9S1D7FD+kzAmzzfJE5g93e4:gE2uiAEM8E2b1/IuNA3hAnE2ZRE2I1Dr
TLSH
T146B733C0F7538AE48CBD577A2D4C59AE4D834DE92DA2E223C618C1EE9BD09D2F9DD101
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5788-16986-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5788-16985-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5788-16981-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5788-16983-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5788-16982-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5788-16975-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5788-16977-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5788-16984-0x00000216B2340000-0x00000216B2341000-memory.dmp

Download

memory/5904-12976-0x0000023EB3020000-0x0000023EB302A000-memory.dmp

Download

memory/5904-13014-0x0000023ECD270000-0x0000023ECD278000-memory.dmp

Download

memory/5904-13002-0x0000023ECD260000-0x0000023ECD268000-memory.dmp

Download

memory/5904-13016-0x0000023ECD640000-0x0000023ECD656000-memory.dmp

Download

memory/5904-13030-0x0000023ECDB10000-0x0000023ECDB18000-memory.dmp

Download

memory/5904-13303-0x0000023ECDB70000-0x0000023ECDB78000-memory.dmp

Download

memory/5904-12962-0x0000023ECD420000-0x0000023ECD4A6000-memory.dmp

Download

memory/5904-12977-0x0000023EB3030000-0x0000023EB303A000-memory.dmp

Download

memory/5904-12975-0x0000023EB4CD0000-0x0000023EB4CF2000-memory.dmp

Download

memory/5904-12971-0x0000023ECD680000-0x0000023ECD784000-memory.dmp

Download