hxxps://niqai[.]com/unlock

Analysis

user interaction
yes
max time kernel
342s
max time network
344s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://niqai.com/unlock
Sample260811-arg2fssbne

Score

8^/10

bootkit defense_evasion discovery persistence spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
741	4596	msedge.exe

Executes dropped EXE 1 IoCs

pid	Process
4804	wps_wid.cid-1382536856.1786408275.exe

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	wps_wid.cid-1382536856.1786408275.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	wps_wid.cid-1382536856.1786408275.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4596	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308816060750507"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{A8E8D74C-A08C-4B63-ACED-4E7932217879}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{AF99CF42-7B2D-458F-B89F-118467C08549}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Modifies system certificate store 2 TTPs 36 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\eSIM Certification Authorities\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\FlightRoot\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TrustedDevices\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\WindowsServerUpdateServices\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\FlightRoot\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TestSignRoot\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\Homegroup Machine Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\Homegroup Machine Certificates\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\TrustedAppRoot	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TrustedDevices\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\WindowsServerUpdateServices\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\AAD Token Issuer\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\eSIM Certification Authorities	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\FlightRoot	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\Homegroup Machine Certificates\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\TrustedDevices	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\Windows Live ID Token Issuer\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\Windows Live ID Token Issuer\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\WindowsServerUpdateServices\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\AAD Token Issuer\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\eSIM Certification Authorities\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\FlightRoot\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TrustedAppRoot\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TrustedAppRoot\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TrustedDevices\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\Homegroup Machine Certificates\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\eSIM Certification Authorities\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\TestSignRoot	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TrustedAppRoot\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\Windows Live ID Token Issuer	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\AAD Token Issuer	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\AAD Token Issuer\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TestSignRoot\Certificates	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\TestSignRoot\CTLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\SystemCertificates\Windows Live ID Token Issuer\CRLs	wps_wid.cid-1382536856.1786408275.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Software\Microsoft\SystemCertificates\WindowsServerUpdateServices	wps_wid.cid-1382536856.1786408275.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
4804	wps_wid.cid-1382536856.1786408275.exe
4804	wps_wid.cid-1382536856.1786408275.exe
4804	wps_wid.cid-1382536856.1786408275.exe
4804	wps_wid.cid-1382536856.1786408275.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 51 IoCs

pid	Process
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe

Suspicious use of FindShellTrayWindow 48 IoCs

pid	Process
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe

Suspicious use of SendNotifyMessage 38 IoCs

pid	Process
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2916 wrote to memory of 4480	2916	msedge.exe	87
PID 2916 wrote to memory of 4596	2916	msedge.exe	88
PID 2916 wrote to memory of 2144	2916	msedge.exe	89
PID 2916 wrote to memory of 2144	2916	msedge.exe	89
PID 2916 wrote to memory of 5092	2916	msedge.exe	90
PID 2916 wrote to memory of 5092	2916	msedge.exe	90
PID 2916 wrote to memory of 5092	2916	msedge.exe	90
PID 2916 wrote to memory of 3628	2916	msedge.exe	91
PID 2916 wrote to memory of 3628	2916	msedge.exe	91
PID 2916 wrote to memory of 4124	2916	msedge.exe	92
PID 2916 wrote to memory of 3628	2916	msedge.exe	91
PID 2916 wrote to memory of 4124	2916	msedge.exe	92
PID 2916 wrote to memory of 4124	2916	msedge.exe	92
PID 2916 wrote to memory of 224	2916	msedge.exe	94
PID 2916 wrote to memory of 224	2916	msedge.exe	94
PID 2916 wrote to memory of 224	2916	msedge.exe	94
PID 2916 wrote to memory of 232	2916	msedge.exe	95
PID 2916 wrote to memory of 232	2916	msedge.exe	95
PID 2916 wrote to memory of 232	2916	msedge.exe	95
PID 2916 wrote to memory of 3340	2916	msedge.exe	98
PID 2916 wrote to memory of 680	2916	msedge.exe	99
PID 2916 wrote to memory of 3340	2916	msedge.exe	98
PID 2916 wrote to memory of 680	2916	msedge.exe	99
PID 2916 wrote to memory of 1484	2916	msedge.exe	101
PID 2916 wrote to memory of 2596	2916	msedge.exe	116
PID 2916 wrote to memory of 2160	2916	msedge.exe	117
PID 2916 wrote to memory of 4260	2916	msedge.exe	118
PID 2916 wrote to memory of 1564	2916	msedge.exe	119
PID 2916 wrote to memory of 1564	2916	msedge.exe	119
PID 2916 wrote to memory of 1564	2916	msedge.exe	119
PID 2916 wrote to memory of 2356	2916	msedge.exe	122
PID 2916 wrote to memory of 2356	2916	msedge.exe	122
PID 2916 wrote to memory of 2356	2916	msedge.exe	122
PID 2916 wrote to memory of 3876	2916	msedge.exe	123
PID 2916 wrote to memory of 3876	2916	msedge.exe	123
PID 2916 wrote to memory of 1884	2916	msedge.exe	124
PID 2916 wrote to memory of 1884	2916	msedge.exe	124
PID 2916 wrote to memory of 1884	2916	msedge.exe	124
PID 2916 wrote to memory of 3968	2916	msedge.exe	125
PID 2916 wrote to memory of 3968	2916	msedge.exe	125
PID 2916 wrote to memory of 3968	2916	msedge.exe	125
PID 2916 wrote to memory of 3264	2916	msedge.exe	126
PID 2916 wrote to memory of 3264	2916	msedge.exe	126
PID 2916 wrote to memory of 3264	2916	msedge.exe	126
PID 2916 wrote to memory of 1968	2916	msedge.exe	127
PID 2916 wrote to memory of 1968	2916	msedge.exe	127
PID 2916 wrote to memory of 1968	2916	msedge.exe	127
PID 2916 wrote to memory of 4724	2916	msedge.exe	128
PID 2916 wrote to memory of 4724	2916	msedge.exe	128
PID 2916 wrote to memory of 4724	2916	msedge.exe	128
PID 2916 wrote to memory of 1480	2916	msedge.exe	129
PID 2916 wrote to memory of 1480	2916	msedge.exe	129
PID 2916 wrote to memory of 1480	2916	msedge.exe	129
PID 2916 wrote to memory of 4956	2916	msedge.exe	130
PID 2916 wrote to memory of 4956	2916	msedge.exe	130
PID 2916 wrote to memory of 4956	2916	msedge.exe	130
PID 2916 wrote to memory of 1132	2916	msedge.exe	131
PID 2916 wrote to memory of 1132	2916	msedge.exe	131
PID 2916 wrote to memory of 1132	2916	msedge.exe	131
PID 2916 wrote to memory of 5096	2916	msedge.exe	132
PID 2916 wrote to memory of 5096	2916	msedge.exe	132
PID 2916 wrote to memory of 5096	2916	msedge.exe	132
PID 2916 wrote to memory of 2788	2916	msedge.exe	133
PID 2916 wrote to memory of 2788	2916	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://niqai.com/unlock
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff99cbc188,0x7fff99cbc194,0x7fff99cbc1a0
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,2083365215458431362,1221300090628390889,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,888090788213903270,5968706697457369224,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,10006266417338899125,7719118499686694760,262144 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:2
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,11599093647348974030,5753366026015385649,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,4267409060574043113,415046922529428738,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,2800915482702095344,4774146216595806814,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,4486431606242917941,14982877220833141267,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:2
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,8952202051686372221,15989616255426744988,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,984774511937370640,7827991665543438753,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,2425281622245922247,15701489289152955048,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,2425281622245922247,15701489289152955048,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,3355404910013521961,15511887097379395871,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,2857622211172530917,4433032494835468278,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,10047850436415499748,2013117266884959027,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5028,i,14756058063250682268,4396474844875948642,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5156,i,12435908986304217485,3112019334076818952,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2704,i,596495930155581237,14903300357417576080,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5044,i,6681329070454286445,3226379775424158296,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6732,i,5893507209478247545,18213965393031160293,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6616,i,1517530345860241275,13999326371301591597,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7116,i,16018364887484373991,2352321206967067193,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7024,i,8319864008775291393,11644766570617577534,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5036,i,2901822698246632013,9287200254854546998,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7460,i,8357479540148847143,4435599396496126566,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6720,i,2116323338194759779,5550540950836808348,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7592,i,13635530648853319116,16078399099355190262,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7520 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7716,i,2067023972900929899,7571888891444556376,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7768,i,9282530021280895218,3812452777521300631,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7692 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7560,i,476527341045645170,947029670626703675,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6512,i,5756457601777510343,14297653426032969865,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,14721464259671636451,4342842810005667783,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5456,i,11271995874045208322,8092293323602566385,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,16696117499616695377,2609574066959635321,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7176 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7968,i,5124010454146337626,14299006851826793411,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7940 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6732,i,6593387337758354438,1953019180648823840,262144 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5396,i,18148364718376758100,789849182753917385,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8136,i,3022924912415951831,10327039070907251842,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8204,i,3926284277482540883,16531613704310715694,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7580 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6284,i,16095669903665910888,14656903944910062028,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5212,i,11153037816514675203,5132162754270375563,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8412 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8256,i,16166457367856812716,6160606336077786309,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8308 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=4340,i,16704214336672084508,11791776738141065634,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8532 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8564,i,16539779532934229681,13217444375554909293,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8580 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9004,i,4913986089585843700,8777778994811650134,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9008,i,15477163003526278200,591372866668032058,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8920 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8836,i,18227516517992561878,15581816245166331856,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8968 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8948,i,2166832728505459310,16859996757856385621,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7196 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9088,i,9442939093011733482,17073277684759323665,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8592 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8712,i,11720507495409476927,16990209692017262255,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8740,i,14428002272149132271,11657984954136267075,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=9132 /prefetch:8
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9332,i,1449561618264223641,9011268806701788486,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=9320 /prefetch:8
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8976,i,5364196030003411815,16670616868011264558,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8620 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=6304,i,10684045261241788996,14270099541969656122,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9240,i,4989812452512652414,7793659054705997815,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7464 /prefetch:1
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=5988,i,4577435045701626894,9050900422394133667,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=6420,i,10016087486380655707,8929489799441366488,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8972 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9404,i,2230134503087770128,5320099122928724218,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=7608,i,8488322198720964580,11659363806654941654,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8980 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8240,i,494313507441245584,13289755171757385955,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=5348,i,2353439181129445047,5417473550148534000,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=5356,i,3377094924465952255,13088257757539609012,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=8572,i,5625417604865730523,2934200583681640366,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=4012,i,2442518971915336811,14086732178961305879,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,3938008255127294464,9027192079447057922,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=9316 /prefetch:8
  2⤵
  - Modifies registry class
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9252,i,12515277649866076115,2032514061736199617,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=9228 /prefetch:8
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=8120,i,13069355709119369485,359988464127355907,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7656,i,581360718326268058,5475603953671929722,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:8
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7656,i,581360718326268058,5475603953671929722,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:8
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=5848,i,12140029840619034057,8189576284049810089,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8852 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=6768,i,18079710372644758276,3306230964557314784,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=8580,i,1795418013939617481,13058509024328129938,2097152 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,12997506575717751861,623746863089565012,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=9740 /prefetch:8
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7744,i,8935411995482589261,6857976703382126251,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=9736 /prefetch:8
  2⤵
  PID:3700
- C:\Users\Admin\Downloads\wps_wid.cid-1382536856.1786408275.exe
  "C:\Users\Admin\Downloads\wps_wid.cid-1382536856.1786408275.exe"
  2⤵
  - Executes dropped EXE
  - Writes to the Master Boot Record (MBR)
  - System Location Discovery: System Language Discovery
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8388,i,1888636762443504126,15358792145440402355,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6924,i,14585588815174330344,12570383617131278286,524288 --field-trial-handle=2504,i,786260375149198320,2328320427551897850,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:8
  2⤵
  PID:5712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 24aab8708cbe0ed525579a638722ba9d2922cb7ef30c27515790fca0c62ba774
MD5 68a7cbc18c8a03ea430b8950c51aa5c5
SHA1 47433bd904da7349d5e3e5a7b63432aa65615584
SHA512 ced317ac205d696f043298db5df20e2ab77469336e526d845ef39bb9bc05eae19551f89babfa98168b15d9a30cc502c01bb5c267295419a11779f62a5c6f792b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7O:fwUQC5VwBIiElEd2K57P7O
TLSH
T171B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 8d7985ae79c04f71017ddb344349ee100c4100a976154b2aa2e5bc73e6127da0
MD5 72d9b86b8c514526e7eb47599a03860e
SHA1 bebe6176965718ff597ace13b546c3c2630e9824
SHA512 5a785599bbcce6f54b772d2adeb4cc16a71403e3000002195150df190df1bce630bf4e0b2e559d7aa54e21ecf9fd285f9e577f22c41264a39697c319710f2691
TLSH
T10EE0683612C3C5A40E49D2CFEC28720E5056719D9AACEAFD7BC4E88CA48000A138F0B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 1c0d13a455de0fe26a82dba30f869df58070ba47fb15d428c155e1586ea3e5e9
MD5 926aa65a3b0dc4e30fa860a0f510ad38
SHA1 3ebb1e6bd6ec6e25d01709df97ef41280f8bf3cf
SHA512 1b1955cede5d57a26b923b4607ed4cb68bde30d6c3ba9135891b8dff41ca7640ae1d52ec66fdaec2034dd0d75d2e4dbaa48c7e52bc5da874620f8d8bf2a4d733
TLSH
T1EDE020C804C7C22DAD96F58F916C570C42C03A4FD6D4BBCE5F50C858350114463CBDA1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 383KB
SHA256 1512eecd5e267d12b405f307187e42afa283ea4165470b6f62214a82c39bd737
MD5 98b30f8651a1983fa13ca8e298374f0d
SHA1 bdbc87b20d8ffd288fbe97ad9e9cfd26e702499c
SHA512 1ca0ad93cfbdb5a47185cc670b64cfb64312f3c6697974688344c38e464ac66f16c5953dfaff6bd77139023dfba28249192c6be9ccf29579cb9ca0eff2de2ff2
SSDEEP 6144:GpmxqcjUJs97RQvSRnjXKYcKtWrq5m+M1vlDPLfkWdTAB0a+PLjyostJfqmiI45T:GpmxqM7RQax13YRlzLsiAB0ay2zqU4Kw
TLSH
T18584237A1561804E16E6B284C56DB1F6BBEB5E48DDFBE3502168A40C2E74393F7708F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 55KB
SHA256 95729b031516fdb428f8cde90a1b4ffdda50317b4b4899e9d93e9af113e30dec
MD5 53cf0a20d0efdc8be86dc326906fc2e7
SHA1 fb53269859a2d52002fc6e926399a5235660e25b
SHA512 2e2b104305564f052ee4058697656d4983617d1ddbf3322d6f86e28c74f47c51dcdbbbbe2e1f83eef9120039aa05554eb09cf7bf5ca6bfb474d7acf13b20b84b
SSDEEP 1536:JhA7SDbMw7vZiT0c0GsD4AibzITBEwVAWRXyI4q:jjbvTsTBVxAJi0Bd
TLSH
T1784302E0DE925860A4FDA1AF004E5B478BA4564718C20F6DDFD78EA5F95EE2344C34CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 52KB
SHA256 3fd135500e54140a94d7de5cb06c97c8b46cfed50b846132d9878eac5a71c769
MD5 18a53b983d5229922a1d062112f7b0a1
SHA1 f51d57d689bcf6e47e177e3f6b01ceafd1b22306
SHA512 cb67e79684a491d4bdcc43c7c1724cc48a414cee3258ca1a4f0c63d6b8e53f52eca38415a0669fe161555644f2b188c4bf100f2b0db69c698ce0495cfabc780d
SSDEEP 1536:6tKqFI9i9gyYGJn/GuRJ+rOQnvhWB7XGumgpiJBCv:QKqFIgbn/pSMJhRoY
TLSH
T10433F1DBA91F61E3488CA2DFDF3C9895164EC0A25B51A7D8E338974F6D073AA71048C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 76KB
SHA256 0d02410a36ac891047cdb8cf35b5ac1dd93906b19c7e596d31f631bfa5caf925
MD5 a1dc7fc5d05a16ab4485abd711c75040
SHA1 19efffa0c7568430b97782e5e366260df85dacca
SHA512 5b74b6fed5bb1be51ec637b64eb7e1c537f8ee59818bec0ccf690a331bfd530be6def332a9d429924fa901aae81e408715689e13ddb5fb30dada3444513dbba3
SSDEEP 1536:gsCru7Zz2Nx0Yoh6q2YtZ3ahns6cIsplYjoEk0k3iG:g2N40hL2ashnQrp8oEkHyG
TLSH
T13573129CAE99C0F8EC37110A1AC558D8CEDBE5E79EC39AEACCE494F5841F0F09C60554
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 17KB
SHA256 704d28cfa6916f9df65b18bf116a3c34f0c46895047a3417115f78d6e8fa7224
MD5 4babd9d42366628ef9effd8b809e29eb
SHA1 b2eb263c8756b4ca0aea7339b2115631491a6401
SHA512 aa896b42b3d7e5af481802aa758f0607aebefbb3e47c93aa1f579f21aa6b63a5582fcf9555530559f95735b6c283c7ddd67c824c998f72e21afafca1e18dd9a7
SSDEEP 384:WhhxLP9L0J2clwBnXrjbSIvwReQ0+/QKGMcN1x4lPA+7:ovLFLY3lsnXvbVZQ0Oc107
TLSH
T19682D1F223F271E4502446F17D2967CC21DA321193E3367940B6A6AEEB6DB1F8B106B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 19KB
SHA256 4a55a28f24c78d5c7f275119836944158eed80c74e7a7f558f19ec3407639cde
MD5 a5a82fbab8105e43f93aae4710b2e9d5
SHA1 82a43ede2929cbbe463e31cf366e79fe6aba89f2
SHA512 7d5f56576ebcb458ea742213480a030bc8ef6f3c9aac16b97eae5d8339e07e4aaaf0313438d91139eb4141ff410e53e6daebc023f81a293724beb6fd24b1b4a9
SSDEEP 384:ZHotVzQ5+prjOoYH1Fjubg1LhrpHzoJgBcKvEAwUNoL8Ifbx7UNcaNs5:ZItdOoIjdBoschfbx7cc/
TLSH
T11A92D0620378002462C9ABF915591F50FEBD98508DDB050CAE6D72EE34668CAF5A18EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 26KB
SHA256 67ec417c841572bcfaf84ceb57311dcb9a55f6f3e760d0e990a7ad9d93437d34
MD5 898d1cca879ee5f2b6945683d3dc539a
SHA1 3a20224e7e015559037273cd5bc6b457fd06652a
SHA512 d4f20590790ba6ef8f79d6c1f1724ab5e5f7c61e77f69f6abb4d2dc1ee663d0333bca14a7b03cf1af386ced6c698e97015f44cc2e47c5dc24157168088975720
SSDEEP 768:PGlL4AZgK80Lv2kDd7JLcrHiCEhWxtGNQ7b+A+64XaYAm8V:u9484id9Lc2CE6tGNy+A+Dajmw
TLSH
T141C2F11C1B02752EE1798F8DDA370B6402742BCC4029AC51AECD5BEF865B64A8A7F167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 17KB
SHA256 92876134e8d1f4cdbd6003244ecd0123f611248b2000a5a06bd1ab564751ac5c
MD5 34cd532d930f064223f2de5ca9193af2
SHA1 e8c82f4a3587a8b0d424bb5779f2a21c9b1bff8a
SHA512 178c25b93bbfc08957af447a5cc30189763a7052c855d09d1ace83a6ad43348e9f9ad371d6c7769c259af4bd29fa22175405e897909a0285f35ce9c4ae0d3c87
SSDEEP 384:AFc62N2W9M3pvLvf7eXBPLVTfAzW7s6uORXeSTvwdPP:A26E2ApBPxTYC7s6PukwZ
TLSH
T18472E1CB7C2C240F7DBD31932E97FF494B14724A2494252910C6B7ACDC6C1973AA093B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 18KB
SHA256 b83165210653338689ca4db75242c6b1f34529217da2d2ea859db27a4478ab19
MD5 ae5c15e6f067c2bf2f816ffa2119a242
SHA1 efad35b55754730806126710bd3b452de3337f07
SHA512 304f597cdd35ff06c5422c35d1e83a93981af2f7aeb39f30fdded7f6554422ce282e6b85cd827e9e19c90b72226bdeda52814dbaa7b8b08bc5f498c4a0a2c753
SSDEEP 384:TcoEqXJYawnsE+DafMMfcuP8jEgyxE0aWb9u01GIBr0aR5U9/Lyp:TcodVAsdDavk9yPr1GIlvUhm
TLSH
T16E82E043477BAFBF20BEC227A8994379B50F1271D988FCD27D958895137270C014090F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 86KB
SHA256 c1a202cc888d8a81baae8a7fb7f317058b5215acf0dd44233c0ee92c8592dd3f
MD5 9e6c3008388010e0bd1fbd6dcbff02d7
SHA1 ca8d71f947f219d8b55b6131c5aa8b8883f872fa
SHA512 37c55509581f26804ef23c3f2b6cbb7b35e8855cd98c237c1bdb4de83c514eb99e5890c62977a4186218e760ea97994dad13b32b804562303f8f592b889d71cb
SSDEEP 1536:qJ6sPGY/vmLVWx6mheaIJn9ixrSZXACciXT5Bzg9sIj2KMr6lmdWr3:qJ6LUv8VWXhzIJn9ixrSZQri/z/himdq
TLSH
T19283021ACB7BA98D05EC563C34673189DAAAF7452E1771DFE4D03CB88002D4737AA6E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 71KB
SHA256 725303bc1a8a30a31cbf0a8f0388b79e615ae61acb3726634c24026879a7da74
MD5 d59ece25d7570ab000c7c549dedd4724
SHA1 29e906719e973b59e50f9e737bb207f42262fb47
SHA512 9cb3f8df7864c6e650a5ea8ad72b35b4ec76beb3406f9feb8b38212b6c9e0da39ca2fd739c420564c671a545bef1f97c98b5ead78104d1927bd643b7e806c050
SSDEEP 1536:tPG3aW0sN9qqF9l2iDuZGkmUUpDj78IjxqM5m9Fe/1BnzLeF5eWOS6Xu/RY:o50Q9qOihZGIUpH77xqM5myBn/K5eWgd
TLSH
T1DC63F29B6178F10BAC532ABA13F29F0B6407E4978FC801E6D746583D05CAEBC555837E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 316KB
SHA256 276f3c36f526f36904dca3c9a02c40d9e3617aebb04b28597cb7d041a42ed54d
MD5 4fedcb7a2d6a00133588b2ab9ffa0885
SHA1 69ec2030b083bc1ff63630fccc535addb8b93e2b
SHA512 d3a04cafd2db992e41149f626ad9146c61c6d82990db5eadf04eedba4e5494b27a62bebc3e8c96a634c7976ade5985560fdb57eb67341ab1464e5214a606b16d
SSDEEP 6144:i4OTVrMw+67AuS2ArQFVF78i1IUiQTVaaEMkbGIvE1Ip+YWaJNEwdBTovZbH:iXc67ZXAr+Oi1IUiQ1G7vE5nMNEkBToF
TLSH
T1BD64126D9EAD0C36F59DF9B0891492A494C2331E74D3988F234C58B492FDCB3B4791AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 46KB
SHA256 14f23757c6b41b4b6c0b967ca3fa74ff47a868728158373461c4e6e4b6368f19
MD5 2465bec3a1d5ad40ceb1828a07763d2f
SHA1 656fca193330ac8ec592a0942f4e7d718fa69cbf
SHA512 171195e97870d0794a5762cb3324c2994542a534f4e8ec490400f5667527c48c0c2814071fe9449f4d78169b2d35228466cfadea81229f6ebddf791dd3fb2099
SSDEEP 768:/FAcvRO+HWzD3hVYA6By+jNbKulKiuJ+YAnmWjKiXN0EoGlknbxWuFYCrJRSx89Z:33sD38k+jYulvuUHnmTq0bGlyFWuFYiV
TLSH
T16123F16CA80DF34596FAE4F76B11FCEBF248BC9177C5EE10278C864D8575AA5CC28241
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 41KB
SHA256 a83399b544f380f6de780839384ecbe8a39f1eefb86b1c63ab0ea3a9a73e79aa
MD5 aa494eb420cb3a96b822a7d2f713712b
SHA1 594e0cd351955ccf676d10345d91441fc6cdf7b1
SHA512 0628cd291b5a789fdeb51a4396b9b6df9bc1648463671280ed283fce6139b24bff73bd703cf3bdf0e4d6dd1af432efe7f31f90dc99736b7d9bad972371debf87
SSDEEP 768:aC+/iulvc1mSWWsCxka6VhKi6SnmQMaK2TKCDdR07MHsdN6Er0b4bhxb7DVDXSu5:a3/iuBhWHk5Ci6/QRKY5R0wMdN62bIu5
TLSH
T1DF13F285ED2898F087CBAB6D1CFE6E118D213244D567921850B1F76A5F8B1E3FD4D8C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 220KB
SHA256 e751f9882cbf29884eb6e04b3e4f9fc3ea3e4ff903553b90af7e32c783e57bae
MD5 06a130335bb4b65e98806cd215898c09
SHA1 9a14c0525666d7dad2bf56626f323c3b1b191243
SHA512 a5abd668cfde8acb05f909f92f6f7cd54a4c3cf7ba19688bf6b551ba73483ac031d72923773d7b7b669b438fc7fbe75d5526653d80897526a44fd952c69544dd
SSDEEP 6144:67hhNJWe2xwCEN+V8wzb18sBOZmOHtHGXk5:KDaej+u8b18s0VtmU5
TLSH
T1E924224F0C52038A8BE0518497CB22FA1D8CDF6ABBE11DF4BC54A5B4D4EBDB28357652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 87KB
SHA256 8300bdb4927a8409c6a0efb35be12da7f9d661caefdce9f6d706be9f2afd01e9
MD5 8e6a010cadf680eebe8de6a349ccf282
SHA1 2de6dcc4d55e5ad67af9f37bde548d72249939ec
SHA512 a6e44ec8f52e338bd3ae4a23b0682f6961dcde68e3e1f8d8c15c375d6cc6a9cea8e37cc8679706cde567dbf88e416b6cfc999a41f3d2865086aa2997f28a261b
SSDEEP 1536:n8XyHMuVMV75jTVwLfgR/5z+tUYjGF63CRo/j0a6OUxuCIj1D3yIdF:nouysgRFcGF63h1
TLSH
T11693298D3AA2346982A374B5213F910BB23B58B6B40D5C61E7A9C5D03D74D9D813BFBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 86KB
SHA256 9fcc27da215d4415d7b822b80019df3a60b69933a79299d24e37b7d5e9380408
MD5 9ea427267290c4ebedd4c1f4751d7a5b
SHA1 ee6ebf4e91ed945b40436b54ef25efb4912c47bd
SHA512 2fb1357eeab6daad1246a642f93d609fcff1c779b630867691427744aba827453016e5b521b1415d0d18aff9a71237339f07d2b1b0b4a5d944337e1ab552042b
SSDEEP 1536:Ue+cmalJP+GyhHtSqGrV85qFEWSMGWmzLaxjNjbh70WgfCwrIvN25PxwXPoD:UlalJ2GywHOqGW7K2xpjeWACwrR55Q8
TLSH
T1498312335AC614067E939E853747764BBE4ECC090092649CF41F605EE9B9E2F12FAF86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 77KB
SHA256 726b1648ffa5fa15f2ed648da2ce278f6b2e762cee68a65fcf56b01bdd4d372e
MD5 c7f8d7e150db2d05c321a0ff8ce9b244
SHA1 3bc2505182123d25c56abf1b65853c18329e0775
SHA512 a41eb27e74f29c3ae710120a47b67aa69ee2cf3d4e83f183f0e80c439bc70c828a9a354dcda0db000a895548c0d54bac1679464c22b4efd9cdf517fdf2b753c5
SSDEEP 1536:3cuwiMWpGUr21g5vHRvGVjcOB5TmurwrPFEfut2kQQcMxCU:3twgkUiG5vHR+FfB5TmMwEJJU
TLSH
T17073026490C6A503DD033B9C586A6F5B2051F68BB6902FB57E426870AB965B04FBF3C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
Size 21KB
SHA256 38afa82416af277cd81c454bfb9e4b34560f1b035499564e82c6f66f8b00d81b
MD5 95422876551af36c8358c427a74886b6
SHA1 07708417fb000d6d5af1fd8a33e91c0d388f6291
SHA512 2d3b78f3edc816363a2bc959cb1b767d8c8af8b5efd5fe50746505abc6c8ce99482850c08dd24315f7aba0be970b8b3337b2a75673853b172a3c0bb9fe3e911b
SSDEEP 384:cSfRoG9IThxIv10fRPLZKT7Fj6SRTpD0bJQgtYA0Z6Q5w:LRoG9AQ105PNK5G+8qgtvUw
TLSH
T1D5A2E0D31080C48D6BF3471CAC9B12D8757E0299A74894AC366A9C37E13256DD7BBF83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010f
Size 41KB
SHA256 c61ac17b9193e8b9e6101379dff61b901665fd9a632ef4aa8ea0cce4f420b17e
MD5 ec2ed817ca553af1f737521d5da62a41
SHA1 0722c6015ec0cd270c8d9484fd211a8f4868ec0a
SHA512 0ee8d2fd8257daa19560b854f9ac002a42b88ceabc45514d887db5bca3ed39e26514c6e06b2d7f504d422ad6dbb9e8544dc12c0bdb63450164cdc5549ec05748
SSDEEP 768:bBJbnMFWRTdIx7yqhTnPbg5ufxjYUQ9SYStj0O6eNouQk:bXyWRGx7yEP0cpisH1LyuQk
TLSH
T1B013F169B458A5FCCF52004C09807EFB4AE91CA67302B0B895885572E77FB5AC153DF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000110

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000110
Size 37KB
SHA256 b7db8b71827c05349a396460bc3414f7ef6ac2d6205fd6c55e5e3d25cc377303
MD5 6b33751fc063e56d076431c949793021
SHA1 fbd79e94a128b56e5f362f0a52af234b23a5cbbb
SHA512 0b717cc2ce07741cc9274517404904122038332be803d09fd0e17f6d3139b0d0c289159a5e6f55c6d815d3992a31bec631cba91c5542ef663d6d5c9f1ce57406
SSDEEP 768:3tRBd5spqccrbqY7h2KEoUO/CV1vlLCtAVEaJ/jnY:3z5spq7P7YKEtOAvlWAu8/jY
TLSH
T18D0302EDD223144679E9D63FBDD0126FE8CB19470A721B93405AAFF2DE8271CAD97600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00014e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014e
Size 26KB
SHA256 5a050d0f8eb12e5ed13a1229f2c12f61e5ad3fcc6d471a15ad3235bc3dd7526f
MD5 8e0118c5b04c41c35bada8b690b68032
SHA1 dee7947b3db1dafd29c0db2b9c1f9a8fcc79508e
SHA512 50a3c3412d4e44d78ec604a6a562590150c51960c173297640c68f024e657a1bea5902a65fc8e657e5272cc50339c22722d248446863b4fb7ad423d9dcb9585d
SSDEEP 768:50e/gns/sNiVbIAdBSexjNb7X9rmT9Lk2mKjOgT4F:SQIAd4exjNHhGXmKjBy
TLSH
T14EC2E13BD17C7C86F915AFBAAB0086107BB4139D35246189DE7A0F984596B7EAD00B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00014f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014f
Size 71KB
SHA256 6bafe17e9bde61e8cd786098fb763176d4a25eec4b764f7e45ed291674f05fe2
MD5 f672c1d8172d1f176ad3f6d1f6b6c3dc
SHA1 7649258b9c9a9cc152f6741349a0c5d0300c19a0
SHA512 6f3bf0da92213fd69fd26bbbe1dfe4cf418fbf11e7a0d569c188d1937ce5e54c98fe7773ce5311b5285803c26a6b1c5875146eb0e484308be4aa8034c2adeddf
SSDEEP 1536:tfBo1aF1Wx30iQ1SDGgaSXgdpBoX+UmYF0hh+:Ho1aF1ViQSDGgUdcX+WFWh+
TLSH
T1D56302CE7E7A9A023F5603E6E38301C69426A74079564CAF56D9D7E8086E01EC0F6D3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000150

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000150
Size 24KB
SHA256 1708055e2d0ebcec6793d5691b0a9df6a18dad66d69efecb23ad8b76585cfc12
MD5 b57b38167e2a471a4b6ef1dc2edb5e44
SHA1 48ea4f02c10430353058ddecfd28e5f7b4546c3e
SHA512 3c3e598c5a51c15f3242ead7a9be8eba23734d4fed9d01f11dafd98df02f96516f5f5ed0a6207653661b14caa28281e0bc659b64abfa2408450e4a0eaf5ecc01
SSDEEP 768:OhkMWlvUpAzH2p+9tnEYgBG95bAoof4gd3zmayBn:OhdWlcG724v7MG95bHc4gNyN
TLSH
T1B5B2F185B6ADFF804203005F7ABBD364628F0AE0E75C65B30772F599C0335699974CAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000152

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000152
Size 171KB
SHA256 4c8544425df577e16c61d17f7e01e3da101f0f1b62230eda275c971e1ceaf4e5
MD5 e8942f6ca51e6347f6787cb893f635de
SHA1 a1f4dc3998563edea16aad4de0c11a847776d995
SHA512 aaa4ef86b3c565d62f2a034633a826005b20bf64f53a03fa7a793993ec05696fcfab711d98b7e39e5abf03d6c09dc0a965d81e6177a0eef23b4dc7d29bcdd861
SSDEEP 3072:uNQzvhKie7JF74/y+05TN8sUyKzptH3oXqDp+Q8kbA+DZgBlX14gqAOQkOGtUTo:uNQjUfR+QzUyO3CIQQ8kbAzl4gq4GWTo
TLSH
T1510412E14721A5124EBA17DF63CADCF31EF1D04832E95BE781C8E5B26B160B1521EE03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000159

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000159
Size 24KB
SHA256 c7f1ab381d3c6f0c52968d2d14278c0b107b53a5e154b7381d2a46590e7d33f0
MD5 8b62cb77af08af8a3c92a15d0534ad07
SHA1 a7d15c6d6a8177b229297c54df57bd344b794513
SHA512 3ecf677f8eff0dfd5920b9d2ab8b8de21f7eee62ab429a033b0fae624a6a88718e595a81bfb5dac841f1d67bef8f0d786ba57a5096327cf959689dcecd16a823
SSDEEP 384:ziHP8fq520czx05WRFDagKW0LGE5zX9twpBqNuCxQSBx7eh9nAj751HDdg8Y:zcEfmY02FDagn0n5rbwvCCCo9o51+R
TLSH
T151B2E17C040ADC4CF924AD5E751C3B7B29349AB31FB4A499841A1F09612A0EE1ECB1B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

04ffb291c390fb31_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\04ffb291c390fb31_0
Size 263B
SHA256 eb2988fdcddbce80bfd5ee04634184c0391f2ca496876fcf895965a2cce7ece3
MD5 5c7482ad9ff5b46eec73239256800e56
SHA1 08f787e02633f5cb79d4e4cb20011be5a9e0aa35
SHA512 701f0ebe759824d07b8b41c5515ab92a35c30a1066deed00edbae91edda6bab4642537be0a04cf0edc1f4d0328419e0ab9d92858c0dd11696f15ac2eea1a3c55
TLSH
T169D097EF50C00828C0FCCAF08BCE521FC30381828C76C049B9316032230CBF1E28A601
MD5 SHA1 SHA512 TLSH

Submit Download

1d44169a87c9b71e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d44169a87c9b71e_0
Size 52KB
SHA256 c2ee609fc55ed77e8ba0ce704af1100333e70bd07c11caaccce86334df13d938
MD5 7bcf1d059b2ff8236ca22a2b5be20189
SHA1 9f7b3f471d79ce13243173d16075ab5cdd8efa2d
SHA512 e53be66c333d403ef051dd72b9b7ab5f5f367fe188cf502edfa5776262f845b6e7b8d0fd0b78c0165f48c76827c5fa384c6deb1394d002c0bac8136083bf881a
SSDEEP 1536:vH1ag6dgLcwrcecdugEgKV+TUTPQvD3NWW2blle0:Nag6qgwrcecdugEXV+3Dn2bllt
TLSH
T107332AFA63406E22CA6157FA110286272370D94D3EDF971B3291F2726C1D2DB1E97E1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ed780bdef7dc7de_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ed780bdef7dc7de_0
Size 14KB
SHA256 7c1b20be968727d8d79efc6b70069a0449a3f96895a1da7669805b8d2137559a
MD5 8a9bf76c4b5349c7264da760a288cac0
SHA1 55b80e8dba25afbc9eb9e59f26de0059878daffc
SHA512 7fbda98e87d8ce851fef0237c069f62f4375ac07d7ec3ebbbfab9a5f32d22623d63f5a4e3304b7c68c0fc825169a54cd7f9ea6c6f5e80e2cb5b9ce720b6a67a3
SSDEEP 192:Nd/SXm6WDmYwA1rGYZDPuFF3OB36Ce5zoOZhiSaVS1HUpVa8UiC2UbSH9oEj9iNm:Nd0mrDBwA1KYdUkuiyn+ezt24wOJt
TLSH
T1F06293008F502E73C92A57B809539A1B7A3106C919CECA3F70A452353C676956EFAF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3395a83f918d6138_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3395a83f918d6138_0
Size 2KB
SHA256 39d5991d12bdc22f6fbb2b539abf326542794c142cdd23608ed2af3d843ae2d8
MD5 f6331d3190bf67781e1aa1df67894747
SHA1 1813663fcc9f3aafa1f78d14aeaad0ac86bfe2dc
SHA512 f741292d21d4b29b78508f4a49352a9a0e4abdbd98dd84ddeb8141ae4a6bba28027ba74de3cc07b8d6fb9c9464af8c346963e7825075955bd6678d9e43f9f1ef
TLSH
T10B51C745B791183BC62687F453994063F372342D3EC7831B2A8423769C366FB2EA3D05
MD5 SHA1 SHA512 TLSH

Submit Download

35d5aa88fbbf209a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\35d5aa88fbbf209a_0
Size 263B
SHA256 ccde05d58ee7d5838a101adac225a73f9be435fe413283708d7b55e524c879d4
MD5 6ccd4a95a42d94d0927d34620865d10d
SHA1 7b1bdba322bdf8aadcdddd15c04e3190e30ce016
SHA512 3416908ae582bda5f050f646071bfd2970e6233325935fec45cf1e41228df7af3e9e8424637b9d3b9b347fd3c42a4fe3120c16f04ee327076053e87f3fd6944e
TLSH
T15ED0A78B649F3951C16466B3C77BE70BEE7BA2591F8EC085410A70A602C4CF166DE51A
MD5 SHA1 SHA512 TLSH

Submit Download

44c00fb2b86db013_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\44c00fb2b86db013_0
Size 278B
SHA256 ad4c71f96a22c30784ec0078447609b42b1f12b4f0452305767a751f360e9f92
MD5 f663c1bbfdaacbdc0c7dc7e436d43a65
SHA1 6370e0e1f009bf3636f312a7d26e71cd48b069f6
SHA512 d19985a7ce014e02008ff55d7ace2ac8d0b7170894f6efedda72ca1ed116e4630c58dc81fbf7f791cea77225fc9a65c1b41b15466081088d3f9b84ebb041473b
TLSH
T1E9D02BE305982900D84666F0C7F55558E73290C46D7DD5517441A9EB01424A15FC3521
MD5 SHA1 SHA512 TLSH

Submit Download

4abd80061ba4edc3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4abd80061ba4edc3_0
Size 6KB
SHA256 b1ff4879d9e30c117cbc972afdf30838759efa965a275e5508def1c2cfa3e7ea
MD5 f2e879640890116571c3bb52e794e6c6
SHA1 3a270f83ec2208f2ad86bd1f9a018542aeaba93d
SHA512 3a2d374e495b715e82812a667cdab6695c3b7475ed53d42d3c4d19a414ca6b3dd9921ec198bb042ae92bf278440c2b8033a99200a7f11a1b773fecba5ac0bd42
SSDEEP 192:kioZopGMGgoMTuEnATWjRPB6FDWki12v/O:boZopGMGgoMTuqAT5Wj12v/O
TLSH
T1AFD1F282E3D3DB15CA5A37FC0153C7A3A734951D2D92D20720F88B7A3D1A1DB8A59E4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70045a1ffeecc15e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70045a1ffeecc15e_0
Size 98KB
SHA256 f1f23eb60953f25335ca5d897181c3e1e697253782352efe66c44f2ce40ff86c
MD5 e45c80034240fbccb398a75d902b81ab
SHA1 9adeb060debfb359d8a820edd720b5e8109be5a1
SHA512 3a52679c161f68cb47ea25786ffcbc5a099114f227307fdaa30501f8da5e740356e63107a27c67cdb9e56fb47611f412a9ae36ad9b12c6014845f2f9b197bf4b
SSDEEP 1536:seo7RUkIy3egid9Rz44xUcreM/GwMso6UL7hi1Kqt6qvjWf:BKWkB09Rz4aUcre7wG6Chi1d6qvj4
TLSH
T144A3C5B96BA0AE25CA3557F0415388177732481C2ED3D30B72E4D2362C5E9DE5FA6C8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7656dc9d1794ee64_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7656dc9d1794ee64_0
Size 140KB
SHA256 ac2952d6c11b826009a02b1a9ffa5883e55e0bcbc93a60ad6f01d2a9c5be8292
MD5 45e95e3c0673bc541718c499158c6a2c
SHA1 40b2aacf752a30df316efcf94d9cddc7ded2d1ef
SHA512 81115fbb0e8de21f92e7b4d7f90ca8c00e170d3bd32f1f4eea15fc075a551f9b863b157759097cac4266d6909b19d4fa3dea0578afc869451140c91aec8f8fa3
SSDEEP 3072:2JcMy5MdzVXbojkPNfGdoDWFQo7G+yRU:hMy589E4PNqFFQvv
TLSH
T169E30A256B60AD95CE2A93F540738D2777324048BFC3971B66A4B3352C2D7E71F8E48A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7879de48c68a7676_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7879de48c68a7676_0
Size 10KB
SHA256 b72ca86a158b34049e856d7a68b97bfb4ea80f8d2e3409c9ca740dc1ed6289e8
MD5 5c237000cd84e40eb07f97d9ed45672c
SHA1 847f3bdbc46ef7f67619a42baa38a4c476110372
SHA512 e120c79943431031f7260c72a113a2b3f028d3699f8b4cd7077a2ba4c35c266f9755bc6074899a43cb5c105798d3d477831b4bf4535312fb1f2e2e168f04bf3f
SSDEEP 192:FrTzIw34vrTz3LjdrvnZ1IdRJa2TVeJHLBIX0VPqUA:BzD3+LLjpnZ1CRJxCHLB0vU
TLSH
T12A222F45A7D3EB19CB6723F9025189A7B732495C3EDBC20325F2A7381C9B1E54E5AC0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f0d447e9057362d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7f0d447e9057362d_0
Size 281B
SHA256 0f34ef99a8b3730b07545ee77b0aed4b60743647d3820ce57171d29ff230f48c
MD5 bcea648ccb3e2128420d551d30fcf66b
SHA1 0e267adcb9d54c44286de3b64d52ebcffd08573f
SHA512 6db9ec8e7f9483864ce3009121e7b95e52e6dd9f1d9d065b33e0435bf0dedf2298d2b4b55c5d53c52e117a886eba93305b19a63fad787129d9579ec701f470cb
TLSH
T18AD02BF34D1A45A6C4874EB08235F2DAC563108119FED4D67DC55C9B11C35F24991712
MD5 SHA1 SHA512 TLSH

Submit Download

88a2a3af0f1dda5b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\88a2a3af0f1dda5b_0
Size 268B
SHA256 88836bf7e29d8defc1adfe457f48e914ff5a96b562fd7dc50664a30d73115244
MD5 ddd419bf603adec95506cdf5ae58ed16
SHA1 9180213cd94b9cb32e90f28c3e1f8aab7d42c0dd
SHA512 ea88dd9a4cf38ed018ea2b2c40e42810cd7d0bfa504c281054dcad4591d4dc083b91025f0544d13d072fa7972ba918a0678e378771f41879f411345c4ee2be5d
TLSH
T1FFD02EA788208080DF1E07F0CFB6ABAA8222037C8AA884109D80B0FA26119722882970
MD5 SHA1 SHA512 TLSH

Submit Download

b10ffda73057291f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b10ffda73057291f_0
Size 233B
SHA256 ec48e5b4a0fc8071d35afc9bded9e6b13317b101f7355480f82a47f8563cccea
MD5 612d7bf86c20194ecb95e2ae098803ab
SHA1 479ddb991ffc4d29c18a5c5dc662205a7701e389
SHA512 a0f3ad3ad258b497d8e5ff3ebe36341e86192b9fed0087efa5017a38c66712057a0b14972219d8dbd30cba1a59ab11a3e16cf9b44a6fbedb173d8091a820fea2
TLSH
T1E4D0A75744746919C14A20F5EE9F164BDA02A0E32C2880854261006A411C9785984505
MD5 SHA1 SHA512 TLSH

Submit Download

b5f0d7442aaac547_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b5f0d7442aaac547_0
Size 67KB
SHA256 234d4aa9d00b5df578b1c79fe1ec1848e1bb8e7cf5636a6751c3cca66efedb02
MD5 e15cbfdd61e936032dd631be19b4176b
SHA1 accc80720c0402351b3ea9436565d630e48f2f2a
SHA512 ecf8d84fe6daca62d25f371e30efed4ca8e62b829ca2b5f94daab835dc05aea301790268518e719a391a33178d7af6bb2d6b6240ef05f87d8a53f8a5da8c1a41
SSDEEP 768:hyN/w89sGjHEYHXhunkgWvxXHzD5tWEoptpc9cP4NdQamDlxFHQEnbufkgycBj26:KUGjHAkg+H5twTZOdInZWkWMuHf1/
TLSH
T1996386152790AE89CA6653F541B3C913E33644882FC3E72BB2E573367C563F14EAD84A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db60008552d80f0b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db60008552d80f0b_0
Size 289B
SHA256 f2e0a04f369d34bb4f1e0e5a285e23e940042da91e8eb497ae2879b3e4d6090b
MD5 c9838be811aa77a44022a615e1a509d9
SHA1 f1332ef67755c025e95676bb677a5f5edeeb8a0e
SHA512 94d9d5d67fc1231f468aeddee472d3626cc25695ee2106b2a9a5330401b0ee4451975e6d1506192fb44a883e0d1f08d72bc3ac1736523e2f70ca289c3e318e92
TLSH
T11ED02BE791A02E16C16945F28F994207836258D20E56E09CB11850311B68FA867C7A1A
MD5 SHA1 SHA512 TLSH

Submit Download

df53bad28ea1e322_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df53bad28ea1e322_0
Size 263B
SHA256 fcbfc87c1fbbd3b8975cc4d2a663bfcb911d5eb26f3c18a32ba2062fa8806307
MD5 14ca09603ee4297711ead2633a201392
SHA1 c4bfaacac2661d1f665bd2bab5c3970beff9a4df
SHA512 75b2c7fe985a9d0cf853d21a9c3d1807ce93c0f602c1fbf045c2edce33cb41d0c26fa9e7e10dc25e573e19d8992931b8267269de9c6da1183073370ba3e09f24
TLSH
T1CBD0A7A390D41A95C61D85F0EA5E136F932390CB589DE9CD512470A18654BF477C5633
MD5 SHA1 SHA512 TLSH

Submit Download

e427fe0688803c52_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e427fe0688803c52_0
Size 278B
SHA256 266511a05ba9d3a53159082bfe7578c3f28254614f3e0e6818767f55a1b4c87a
MD5 fe1339ba36bcfe483545893b972b3497
SHA1 96e7033662e0b4622b9c9b7d503f3c7fa72bd4b4
SHA512 6de5c6b1ced15965b9998200cca92dbe49a7d5729f6781029dfb1516ba5e95dbdf7b680823e08f4a22ffc6e403a50833dae0425bdcaf63d0ba31ea3fea310a58
TLSH
T178D02B9745100810D55B59F28B2AB259C631521000AE60993D809DD76202DA1FE5056B
MD5 SHA1 SHA512 TLSH

Submit Download

ea986f35a120b2c6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ea986f35a120b2c6_0
Size 310B
SHA256 7526766aafc6053254f4e1fdb60283d8797cdaa16b8a99745f203eaa766dbb3c
MD5 9eae068a1ab767f4af3973273a2d17c5
SHA1 8fb1bbb32792624eee58dace874b66dbf7c241c0
SHA512 87164bd7e98ce24b1e3899c47ba2bad4baa6002c54425fd8b89e2d084efd7c0c3e668f05c752c7c2d8de4bde752191ca06ab7a78f2fc4c2856cc9f0c59b46375
TLSH
T191E07D9754203534C0F741B0475D921AD35300821EA5469CA02090729658FFE12CF612
MD5 SHA1 SHA512 TLSH

Submit Download

f9fb594836b45077_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f9fb594836b45077_0
Size 303B
SHA256 922667c320315c38a6970bf05425581c500087b1f0ba4a6b02ebc05c93ec50fc
MD5 c396edec87c4b1b543354fb8811496d6
SHA1 5ea0e0b8da0184173dd9c87f1c3018c6c1dd90a7
SHA512 88e724bf6d47f198a956bd94fc91ad0cb947574010c2700237d71abdee271ca411e0459cefcf733b137d76d2a938855d54a4701a1159e6348842330bfe3529fa
TLSH
T19CE0EBAF10C82872E5294BB986EA030EC633F06046DC8152420292934E049B0ECED0AB
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 9KB
SHA256 c010b8b4739c28f4d39d6c4e6899af7e5cbae505797f61d9ceb5cdc9f1040847
MD5 6c4ed831abc65c6b2bc58e83ffa5f85d
SHA1 363456528c1aa2f271f021ad0678f8f3ca57ccb2
SHA512 040d57a1586241d10ebeac4b20b926a3f6b9677966b71a2e435bfbe0faa00748a0dc27a9d6337cafed84025aeb44b630443440c4b35811a86c440b4f2e379ff7
SSDEEP 192:vS3+y+qZNUx5U7NgmHWfj7X3n+vDSrQKA1QFswPBibPxR8jL+Jt1Lo3:W+QQ6/KDDmx8Ov1Lo3
TLSH
T124121BB805A1AE70EFC9E47B2AE3D900397451CBF40B0E67C2B0EE74DA6F784115791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 b14679eb2ca1806d85dab598d9d08090af04d79ea97be1d95fd0d877bcae7591
MD5 7b3bf8ddd713a1d0fcf37f1ce4fa1203
SHA1 e29846085ecbe8276fee7d91d5d3f9a3ba91b792
SHA512 35798aec36a468b18f1188b61b5525b141ea2afbe9d8e2ee2c276cb94d77b9dc6d990485a0a2dbe198a30b77527938c1f6f8707850cd26786decaca021230b4e
SSDEEP 96:1B5bfDZCtU3lPsSQTlcj3bM2utKK93vYoz:1BNrZgGl0jTqjLMvvtwoz
TLSH
T1FA910CF946714FA5EFD1247F4AF3E611303886C6F5171E3AD4201E38992EB5A6016E1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 421b6559b5c2f6d676c0b06f014b38bf14cac38e4bb98894ea5c6a734520f7ba
MD5 984f80ba6c748ace3783b5cd9305fecd
SHA1 d072e65353dff4fe5827e8290549c8632af78c65
SHA512 79164ec04703728a542e7bc146f334f7167da511de4bc54323bc591480dde5de3a34a91d26f15fde18cc93c5f1c3c9830611dcb0c92024a33f1404d486eb429d
SSDEEP 192:SS3+y+qZNUx537NgmHWfjSW3n+vDSrQKA1QFswPBikPxR8jL+Jt1Lox:1+QQN/K9DmE8Ov1Lox
TLSH
T1DF120BB801A5AE70EFC9E47B2AE3D900397451CBF40B1E67C2B0EE74DA6F784115791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 333867140e6484190804ecbee3103eb5d1b5ec02f4c656f3c2bcd8c1931bc348
MD5 4df5be1fdc71fb246012a60864a36114
SHA1 a024149a1a50194108438da277b926e61410b5e9
SHA512 016db5f220f86415cfe96a5387fbc1430fe2fc20c3b14925201acff4ca34705cf293f70e691693ba56dd315bed04a8a727536d0c1c6e78d6de3d306cef87a47f
SSDEEP 192:BS3+y+qwNUx5U7NgmHWfjfX3n+vDSrQKA1QFswPBibPxR8jL+Jt1Lor:c+FQ6/KPDmx8Ov1Lor
TLSH
T183120AB801A5AE70EFC9E47B2AE3D940397451CBF40B0E67C3B0AE74DA6F784115791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 883877bf646ceed63208d9fe977be7feb5bec317c444baaf7e2a545dd5da81e7
MD5 e40b1c29a38b154db6182a32b6aac586
SHA1 5b6a2453d206bd35f65f1a6a7d6f0d8a79debaff
SHA512 f5b7bb8970fca52787195e263d5b9c2e589031bcc393539c7b288874f609656af9de0f1f0050ee2b1cd3b0466c83534a797fae78943dcdd21d33887e8fad0eac
TLSH
T1FE712CF90A710F65FFC1607F40F3E605303886D6F8172E7AD02069381A2EBAA6016D2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 20f7d05769666f0d31f3065d9089624b3e6411fcd10188069051bf1b852ae2e4
MD5 2032fa8c995d2bc3350a35edc22102cf
SHA1 e1f68def476ae385747b023a2219f50a5df775e1
SHA512 9239f5f83a3e598982912d2a970eee80bddcc6c8578895db80dae73e71a5131a1a1868dce27bc4923245ffb35077bdc48c2a49ca2255af473a3f74c1bf0a310b
SSDEEP 192:BL2AAxt8fP6qvv3FWFU9y7cPgHaoemptSQ+a8Qx1sw6r9sun6+ck:5py+373IIUHaoXNoJLP1
TLSH
T127324D7840A0AAB1EFCDE87B59EBC948393011DFF40B0F2AD3B0AD34996E7D81117916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58bc85.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bc85.TMP
Size 3KB
SHA256 d1d74ed331fa8bb701449d44b3582fddb57a92d58fc7cbe1aee6576cbf9625eb
MD5 d9401d0962830c0b69aed92058303c6a
SHA1 b85d52e4b97d53f1db46e2acac60cb996d5a6abd
SHA512 d1105099fd3784a906c103ec2a4ddbe5f1af5e02ba8cd7c920377f45e63a4d1be331c20b87a1cc6fde5e1dcaf113b3de1dd3cd26e9784470c6293cdc1419c863
TLSH
T1B9614EB449310FA1FBC1807F94F3D209357086D6F8172E7AD05066785E3EF6AA11AD1D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 8c2011af679330b1d8e6fcd8713ef687c2696e20c06232ff0de82df4b09c6345
MD5 9c4b528e0d2a7b0a7f5babeaaaad58a6
SHA1 e2df2af6fadf4138a317f7f61825c04f6c08c80e
SHA512 bd862727ffc7b0f8f00cbad31a019bcd2801df07417341fd44949224c365ec74a365b8c3061f2405d788fc114b5d9b70448e458a03e26f8a9a141ad267a733c0
SSDEEP 96:DNOvPuI90DRzzDmjDUXqwBluIw4TQnC40WlE:DgvPB0DR3DmjgXqklE4TQnC4TlE
TLSH
T1D5918DF7C3E8962D891255F49B186F1FCE5D0964831C3C6AC5E4AE1BA3E2470E200B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 39KB
SHA256 3be88cc42cca98e121ab1a399d26a6363ca984cb78ea53da88212cc2aa54f5d8
MD5 253d372a35bf08d9ff174eefa85cbcec
SHA1 556a81ebf6545f96dee7217482b74406c0d03286
SHA512 22ed36bf329a9ad2d3654782203fc3f9eda87f268e603f48fa2781febdb1446c52d3681e21b245b46d8799f1eb7f06c22242f2acefce8fa1c62c082462988f59
SSDEEP 384:DW1P+DA6HeX1kGpCTNlt6g+tLxYpWLEemnpibqJFk/TBecggceHcgJeJJ59JM+J9:JsTshsBZ2topIimolAJk+
TLSH
T1CD03BDF7C3E8863D891252F4AB146F2BCE590924436C3C5A85E8EF5FA3F1471E25168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 8b35e91cb0dfe6b43a7f91309f7cccda9e2b5d555e59a99126e875c6edae659e
MD5 206d1e80f156bdc428c199e0ea616ac7
SHA1 74f7c13014b790aea9b137cb3354400d0c0c0b91
SHA512 a21c2af8215833ef83070010b1011ef78e26bd7cd8e25bbb2e14e3db5276d318854c364fc7a04b097b2ce16007830e38a8c0d31efd043ca1782ba8160fa40dc5
SSDEEP 384:DgvP+DA6HeX1kGpCTNlt6x4mgXqo7UJ89Q7AZnBqWWPHIO4km0hNj75zGatQwi+r:LM
TLSH
T152628CF7C3E8863DC91252F4AB186F1BCE590964436C3C5AC8E4AF5BA3F1471E151A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 30KB
SHA256 8f2b72881e567c4213ad42c2250e5d3982d8de00ea13e4fe9034847516421745
MD5 1bea144bab3e45c6338959c26301f004
SHA1 488ffb56cf6062be0aba848feb2e9c115b97b88d
SHA512 a82253ae1e2f25dacb6ead326e0844c4dea44ebc8ec71978beb043a6468b1e5a3270814e46ba2e3d186306ae09a42924870d24923461e19d23b179957af8b0b9
SSDEEP 384:DgvP+DA6HeX1kGpCTNlt6g+tLxYpWLEemnpibqJFk/TBecggceHcgJeJJ59Jd4ma:xsTs+zQxZsTpD
TLSH
T15FD2ADF7D3E8863D981252F0AA186F2BCE590924436C3C5AC5E4EF5FA7F1431E25168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 15025d2e8bed8a88335f42bbf113f1accc0f5de3a1b3f56f70f8aa274d8d2215
MD5 fb2046d0732ad2b48af219ae7a38b716
SHA1 ee6fbbbbe3ee4de9469b43da8cdb57f2a53ededf
SHA512 84f52e9aa523ad094079acd32a569bf5e000617e718383eb0550aff8aa2b79352c134ea1befc1a5432d946c3e952214fd96c6794aa34d74958d48f00f42f10be
TLSH
T151D02333120430B99D9C7E95619EACCFC73741140443DDD512D0D4DD05314DC1907243
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5a5da2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a5da2.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 622cafdc255886f7721f294a59e4b44f1b3deb10fcf7543969fbc63ecf350dc2
MD5 d7742dd4809ba31f847f48ffa3f5426c
SHA1 99368a92da677fed04518fdaa756f2cd1eeac02f
SHA512 cfc795830a48a13ded87b2484de24247c5a6ba66c39078eea89ababe0333dafb08a77ebe04dfce9fe991c5c7d69cc3807f73adae34c88f99d8aded73513c2614
SSDEEP 192:sxZ0RwyM/jK1Ml8Mk4/fSsHzGEyIdpSkHW6+WNBg//Y9IUFFZIgrJ:sxZ0SM4/fSsHzGWTHbC/+9
TLSH
T12342D6126A34997BCCDBD20DFA55BB53D6F94562D2900E54AEFCDA0C04E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7ee2f93e3f3a469723a0cb14ccbe836d8af304750b8819f2f2ebc172e5939048
MD5 eb03b6022af084cf2ef1857956c35665
SHA1 00480faddc105bd7c35768142ce8cb1ac6dc3001
SHA512 f9d84c282b0a532a91f8af148b03160cbf661d5e1fd57591ffb5e2fb9c11a92336b19f8faa254bb98eadc97b78cf2536699844bfdf99e71e9881450723a9581c
SSDEEP 192:sxZ0RwyMojK1Ml8Mk4/fSsazGEyIdpSkHW6+WNB1WXY9IFFFZIg5BJ:sxZ0hM4/fSsazGWTHbuX/t
TLSH
T15952D7126A34997BCCDBD20DFA45BF53D5F90562D2901E54AAFCDA1C04E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 6d55301f56ebbb2afbb53ce40e39c570095f4deaac7c51dcd9741746a4047120
MD5 c5cd5d9c771b60366194f86193263a1b
SHA1 40e3efb655985fffcf75d57c8086f2c91bde979e
SHA512 c6f4278b771efd635f666b5b624da2727ec0ffddf0b6d869c961cfe42df8620f240b75ec94cfeeee0cc7530a2d4184ed8bc2a7e69b24543f7f9cfdecaf020fda
SSDEEP 384:sxZ6nUKhqsm44/fSsaztvmri6HbHMJSc/3lP5:s8UKosm44/fwtvmJHbHA1P5
TLSH
T151A2E75365304AB78DEBD218F921BF66D6F85462C9D04E58EEFCDD1C04EAAED2202C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 2044a0aade45cd498386ec06cdf1f2df07f9a902a533e7b9347e288a19ae52ed
MD5 30203fee40c23291ed6f1057c97004c7
SHA1 65e9f0ccea9291b011207fac1ca5107211d3d8c6
SHA512 e081d45ee9fae3e253b08939f33db320c78eb37f5130730ed66a4e5f3e8f170654aac923c1155386efe9d0930d0645240ba506ded1df19e4091dc612fdc4b216
SSDEEP 384:sxZ6nXhqsm44/fSsazt5PL/HbHJ3Sc/hlP5:s8Xosm44/fwt5jHbHnDP5
TLSH
T17F92F85365304AB78DEBD219F921BF26D6F84562C9904E58EEFCDD1C04EB6ED2202C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 06813bdf5bb902cd0a86bdd439341d9b635128149ae6d22318a60a56e63b0d8d
MD5 ce58c22169138c60be91ee03ffd1465b
SHA1 4543eef31357f7ce310df98c4335278a836584b2
SHA512 1847f3c2656457683278e63b6f8089ab166dd0e01df658f0277a7278da436a253658cb6d6b5575a17f310da867d9c88146927e684f28dd70ec1c6df0bf54cb28
SSDEEP 768:4xcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNvrokIg6S:4xcv21wWvu+Z+u1jaeFLeRN8kIi
TLSH
T12DD20A2B280CCB7E4F841E9CED2AAF866DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2f51916b-51c4-4d64-b878-af4263e9a070\index-dir\the-real-index
Size 72B
SHA256 4f8e503d75c7097e335280e0eaca80ad7497422d2c43cd61d2230ae87f23b440
MD5 ce0197c33c892f8227ffd983ab4e4ffc
SHA1 3e292a5e7b272627dfdd410c385da8a290b38b62
SHA512 3e809b73252437c02906bf9fafa4760f0a9ccfae2a98f57eddd05c54388f0ffaf4506f209d580b14cac5d9ef9b1418480bbc2f3967ab6a8ba473620a9e717a30
TLSH
T14AA0021916C08252D09312F026D6D24236A44B150201671D63E001D6D9555D6454509C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2f51916b-51c4-4d64-b878-af4263e9a070\index-dir\the-real-index
Size 72B
SHA256 1ab02fc0258e1b1684d51256c7335d4bcc1b037df5acae7a364a343c72e61b71
MD5 dc8cf36832623037514922570449408e
SHA1 b064151fbba787e3e6d72ba4935a8f13563f9692
SHA512 44268f8f18f5bacd11af8334a16b2f38785bc7186bc1c1f721b352607c2decabac8e9b95875d9b90e2d2e87142ac27f2dca65199bafc3fbb0fd9d41f681c6dee
TLSH
T1B4A0022453800015C01215B2295353591704CA502360531786950044CC945404E7184C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4e969253-cbef-4a3d-801d-50c093f549f5\index-dir\temp-index
Size 3KB
SHA256 13ff1080c14df61057dee45026892490f000a2f2e8861db06742211b33a4b606
MD5 932b86530a55aa8b82ad6940135c1fae
SHA1 77ef3f553534807b4af17a4c5abdf418a264bdc1
SHA512 01e6a973c339b38bca16329bafd8c64f9eb4312d01d357606c5284d17d3cc1f0e3f759329a35c6a1887afa2ffc86942f4f636eadb21815d9eecd046c4f0c8e61
TLSH
T17651F84E4C472C69C8AD11B27CFA08417376A8EE46899A0B37ADA1307CC333A2D10155
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4e969253-cbef-4a3d-801d-50c093f549f5\index-dir\the-real-index
Size 720B
SHA256 4fcd0f97898fd33f42529bffe55fc46930605eca226326a5ebb63054b61dda2e
MD5 3f71dd0e2674e6733b270ff0eed9ee11
SHA1 aef538db15ce4c1c37262b634b751891f42e253f
SHA512 756eb7c0f5f9e28aeb002c4aa7fb2fb421512cb60992e1d4453381943cc01ea3d112c7207ee29eb86059870283fc6b6cdc3f521415ca0d309ddc2c742e0e96a2
TLSH
T17901C0896EB15DAFFDA246B314B560A47770C9DD6322D12B542D3A172C6730874172C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0977.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4e969253-cbef-4a3d-801d-50c093f549f5\index-dir\the-real-index~RFe5a0977.TMP
Size 720B
SHA256 275dfb49258eda63fd128e1dff6f1dc94780ce8c26d866fc2176fe9639f59cad
MD5 691586b07c24cbc8d5c133d0fe0a4df5
SHA1 81705e5556a27e25786b443f746c957997ed84fa
SHA512 d75fcd977d38aee3d9468011b916507e31a848062e330518fed82a7371b6158180b7ed56929c0cd803518bc41b8a5982a657ed24ec506e52bfd5995cda7b8ef2
TLSH
T12A010E969AA24E1FE8914A76099510F4B331C9106232E6B3607E2A2E6C3A78969070CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\562e009f-e58c-468b-9f01-e175d29ca00e\index-dir\the-real-index
Size 72B
SHA256 e96d7277513c6b9bcaa935cc4fd8290eab918633105a964a5593e95ef48154a3
MD5 e3d855fd7f6154c3d1172c99cc9454e8
SHA1 b66d4fbccd5f20363f653a356610714c8829dc21
SHA512 eea09e089d5430d0607f183c58280d42bd262b82614031bcd49fefaba5c3685a06b53c750bf191df335c3c19490135b52fdcda09c21d3ba7cbb78c98226a2449
TLSH
T1E2A0022001543091C11116F252C219B123199DA541424326809115DEEDE575CC6110D5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c2effb97-f1a6-4648-bf34-af446b5d8108\index-dir\the-real-index
Size 72B
SHA256 7c19d7d448ed8eaa2b1de13805202320f8ad87d398a8bf46cca6e0af07a80c21
MD5 a01d27d7508eb5798764dc4afb8fa013
SHA1 e9883916821b221b0d655f3babb3c116056a536e
SHA512 afa54f7fbacd67fcf8f379ee0e9269f6cc408ae27ffe115e41318aed4f9fad71f65dcf806e7bc3941e5986e0a39d15d2786c3a118e2f3cb6c7cb83b1d1b53ef2
TLSH
T1E7A0026011829855F2071BBC205BC9C232119C780941274182D0F76C8C535414583650
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ae214.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c2effb97-f1a6-4648-bf34-af446b5d8108\index-dir\the-real-index~RFe5ae214.TMP
Size 48B
SHA256 1b95e94f440c19300e2523eb2afbc751bb942808ce8cf36c7770ef54ab8214ce
MD5 cc6e538ebb7924a9664b40b76450a349
SHA1 2bf95981ed51a939d159a797b4672a9584855476
SHA512 5a0cd2f4c26cfe541625a994a319d9e9464387afb6d3e928544639b753f4945fce07a05ad5bf8b65ec749ee88cf92f75a05f4ad8f270230a591d04846f603a8b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 ea1d95c9e565017ac0c7c005a1b88bfa67eba3215137742609a56321c7ce1dcb
MD5 6577d8e45b255403a49faabe5ad59198
SHA1 3069c61f01d35054ab747db9b0ae7731f515aa94
SHA512 6c006448dc7f6b34c23e6c43c33ffe32eac3a4b23ab2ba4da53a713e6b274c86ada30be20e770bfe173b017448714042cbfc1fda09a1b01b4dd371b2bb4ceea3
TLSH
T1D1F0277B3EF72854FE9AE3D62832009005447C44D454EC8F9417B6C690B1769765DDA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 137225241357c2c92df29e6f1105f77ce60339e61706d656eb0eea751a2d76b5
MD5 a771d8a558d8373ffd345631c8c25713
SHA1 d5f3fecc203c13e7f025a99e0885e4fef52ab6e9
SHA512 ce662c8c2f95608ab88e48d00b913113fb9a5cbebaad1d347a7b7eb37257d699fffc0baf575629eb4d0563c5f1437a4decb529f08cc84c95df0131fa83a6ef2b
TLSH
T1CCE0C0BB2DF72C54DEAFD3E5283204D00101B849D404EC8FD01766CB40B1744395AD22
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 ad5851db2f2fc87de4c28956114490857b7ae5e6d0d93a286b9d5e10ec156d63
MD5 7f5095019f996798ab879b7655a20b37
SHA1 6643d4acc178e7c96a585c3c78f7277973c13a7b
SHA512 d7c9ad39fe992b085e6eef560866f8bce62b088cf02347198090cd56d0ac76181a849c1f8a09c220f8175bd5d10649200c3bd5388d2dabebd78bba6f6d569014
TLSH
T11EF0277B3EF72854EDDAE3E5283200A005457845D464EC8F9417A6C640B1668355ED62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b98637bb7ae2171a737905d5907291f63b4218a2\52fc884a-266f-43f7-98d7-51ee5274857d\index-dir\the-real-index
Size 96B
SHA256 30e8628cf5257491c835122d08a341be971c3a491cfe1e61ee3e5b90198e5898
MD5 db07ea5c232ae9c17c41137ce838e7a4
SHA1 36bd56a01377f8a00801d9cf5ee0ef51e27729ee
SHA512 b0cf949f987ef213ace005963a0df06ddc7083cca99f420bb192c6ec1fb7134c4d7c8d2dacbdab05acc561fbcc0f77818c71866c8ada9b8e5583fbada94adc96
TLSH
T1EAB002524101800BC34FD3FD72C20456777C0E2283970B4190D640BAFCF23CDD79A442
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cda79.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b98637bb7ae2171a737905d5907291f63b4218a2\52fc884a-266f-43f7-98d7-51ee5274857d\index-dir\the-real-index~RFe5cda79.TMP
Size 48B
SHA256 d149973833ffc0e587a76416a97842abd72691fa07a5a7ac074c2c5e6a95ad7d
MD5 bbec76b0bb7e654d351a665ce92adfff
SHA1 379ccf6b6f1f118c54f04952f06420a99faca0f7
SHA512 e414179e976499f68e097716bfc88dac37dca5465a9c3d79c79c9d25498809ab799346f978887d9345904b4f6033979c22f2a36fef91c4aad7a16b73e2b1c9cf
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b98637bb7ae2171a737905d5907291f63b4218a2\index.txt
Size 120B
SHA256 d301b5a84abde0e938a07b99dc5176bc146ce125248e9221e7eb3ac119f2d8e2
MD5 b0049c2a53b55a32bc337fc6e05eb2b1
SHA1 441f2923075467d541d506a3d33460f552ce01bf
SHA512 e5b563d4d88283c8600c207564bcb64e4b6e230ef8fed5bbe5d8c7bf8a6b0c6477d5f5204e44c091212a0bac98427384f8b30452ecb39f70fe7dc1c17c885853
TLSH
T138B09B9B4310D0455F06C7D41761F55DC61B46FC89D0D680C510576150553113052A54
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5cdab8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b98637bb7ae2171a737905d5907291f63b4218a2\index.txt~RFe5cdab8.TMP
Size 126B
SHA256 3d11e236c3dc0aee9ae9b160d274f16cca06478160d0280294e96dd26c253ef9
MD5 37f5815fe3d4a3eecabe78511bd8baca
SHA1 c54c243914ad4c5759ccf43223751deb750bee72
SHA512 b22d96a67b771616d24755f3ad8f5d431e16c9706f3e4127bc632df6d367182c1710f0b8cb5ec7e4ba90dda9de91a491a032cd847a244cc82a71067dd9077501
TLSH
T1EDB0927B832090486B16C3E42BB1F68FCA2F4EF88DC0CAC0CA217752A0753627096A54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 970bbf3ac370e51b87106abeabea1ce7f6984799da92707e3f26d8a631d66edf
MD5 ea7986d8f7cb4b4b2482798a511f875e
SHA1 00bc65c6ba39630fd0333bead763502d8c7de25a
SHA512 0fcab4d6130a70d5eb258d4dfff9efe217ab2246a956b97026c814dd70391224da933fc70360a8cd4f23966f608bdd6a0c04d5c76d1afa488becc86961c45b40
TLSH
T161B011208C0AA0A3C83E0B3800A28888323C0CA8220A032008A8A0B8CC28280028880A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 7712f69ecab7cef353f55f465323dd11e10f0d97af2fc7802ef78def0124d70f
MD5 a0930c9a2d73b3edb42c95b012e106f2
SHA1 f4a7752c5e874566d8253bf5adf9a33acb1d66cb
SHA512 c4c6911fe272e86413b6cb86a38e1ce3092ea5975f444b652dca2008944d930105b40c46fe5cdc194d43d76ad6b5c996065f4cf960fbdee31d73ad7728215f19
TLSH
T1F8A002208A59D101C5E50EB12266D14C735C5D9D0149230948A8D0FCACA55F3A1C5A89
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a5e3e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a5e3e.TMP
Size 48B
SHA256 d18db3a0bae5e54b446d2f9af155f7dd7d846d7e4cf16fca280a210dcdb253cb
MD5 5a087de99d63f0ee9202593b08b4d220
SHA1 886fead6e6c5a6984afd0e4c15d4aae15ce2943a
SHA512 6ba403d9ec0637ed90c98631b9bb16b47ff5f51a5710d213a80cd2ba6c139a7e368a9219efdf0198756b63f2590003e86a27de759ac082738d1339f5b43d59ee
MD5 SHA1 SHA512

Submit Download

68a7527136c8cc3c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\68a7527136c8cc3c_0
Size 191KB
SHA256 e36a9cafe196e43a4a9925eeef4eeaf5c84d5fcb44271161d58ad0d80560f0e4
MD5 9cfe2a9a74ad93a257649f76b55bedbd
SHA1 7bab0c49a26a425c32f15007099028e643a9b553
SHA512 881072bbe3ee15fd47f8ff08b70135f0ddff42a794842fa4e1c957546ec47cf8b9a15aa07a46fe31ef39c5fb7de4fae7d2a40c8299e9168d8ff45173fc8b36e5
SSDEEP 1536:Xo/ANGJTtVk4iGmUBDznBChn/jSIClB/wCULnq2W3670mRovNarJUuB6sIncU8XO:cSXUVzB2SICY10HobVIP8XrjvyPP5
TLSH
T1C8146B715200F47BB913DE60A67E7F4E3C39A16BDD0686FCA5D4E870AAD2DF20521B48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 388afcf59eaae5aefaaf38409d3d148658cb79c8442aa65c37bc629d620266f4
MD5 9f9c01d6c6a0fc884254503e05de0135
SHA1 17b68bfd227fe195b3dbc96bb54a5627efd0119d
SHA512 af7f65fcdb9ad7e06d0410d1c5f4bcd6cc8db253a56957d0675d55a766b46d7efea422eed2d8f82ec89df902c7da0575e78ce29a55c3a1f2187b9865d3e4cd5c
TLSH
T15DB0220A03808C03F20E333230C203003BA00F00A20280830EC000C8EEB3300AAE308C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 06dc73e68044483f39dffbb9488b9bc9ffba3c630b5bdd009c391b7303b88b17
MD5 de2870a10183e60af9c5f11612cb900e
SHA1 522ad350849b8abffac1046f9a69fad0df7c6b00
SHA512 0c5d13de899005bdc9e05439f7c6e95ef2860130bf5a9096f0f3eecfc73487f1f010ed45fc3ca82695910242a340ded5dce5ccbccb60e07acfd883f4d7b11d8b
TLSH
T19BB0120103808C12E51D133831D9020926501A250000CB4302C010C4EF765406561448
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c75859b4b25735817f3449827ab66b118b27e1652ca0512625ce31321f2cbafb
MD5 eff1c3ccfe085dbfacedd2952ceeeac6
SHA1 6a7e5d4630d328d29dd05610404344e9d23006c4
SHA512 641980d5690d26c388b44de6519f63e06c4506d86cb038c894904dc482a19cba1f1b0340f3b32e6d4f4df30c68111a21bd86414a88a34650c33636553eb332ad
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDKakKDqCC84Kxe6j:mT3PTF
TLSH
T1C5913112303B128228FD7908A796863A4F4132677814A5BF7FB900656E6BF162DFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 09303618d682d836965c0b6f82c1f6878ff5ad203b737a842e8f02ef1e25d91e
MD5 63c23dc0084016b3f88c566a6232df0b
SHA1 9bd93cd7518a6f00e3921a82f11f3f379155bcf5
SHA512 57ffd2aab72c3457ec08608072595227db91a8f1ef02550d0d0f4f79a7e60a04b8c13100a93498c5616eb952e66352e3c7fb3bfd82439ba2fe7281fbca4816ce
TLSH
T17DC08CE714644DAF1730EAE8201D326CE80BD10C4CC4CCF8D88880022174A334402879
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5cadac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5cadac.TMP
Size 157B
SHA256 0956c2c8e15dddcfa0f3ea0c8240bcd162419a33d474040a730faed9d9d25afe
MD5 84ac4e3dda64ba95bd3c905e90ab0141
SHA1 b77707f08494112854aa21f3bc709bd34386b857
SHA512 c0e31a409286af0e91e90e64fc8def02eddcb8731713f4938ee937e7814424d5500e0e5ba34636b95422b22d58ddd1e76496a2fa038fee0275058d661d9277ee
TLSH
T157C08CE714640DAF5731AAD92029328CEC1BDC0C5CC4CCF89889B0022134A3384058B9
MD5 SHA1 SHA512 TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

3fd7cbfc-ccd6-4cd5-aa1c-a825c9c33582.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3fd7cbfc-ccd6-4cd5-aa1c-a825c9c33582.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 918c1d1a78cf8b6967a5d4560091254984cb10006cc1f1fbc03d4986404f7ae2
MD5 9d1d6dcdaa8e5825e652a49e91240bcf
SHA1 68e355aa1932596a463d775fd4309d92d2759a7d
SHA512 59e6b586a54d578a560e9db07fbdc6f60c493398f58ac2c4b35fc7c0d8dbcf85b01719d0c37cc1cf7db612415cd81c273b3251ce8ba10305d08cb6e1363f2832
SSDEEP 384:EZcIhsNxthEzilnxe+C5ddJrxuBeRs9JKgqijUAu1:ihLoohzhxuTjKgqmUAc
TLSH
T14F928D3058746D7B99F6F585F44A36175FF88027E7C52F90D1EDEF0D02DAAA8230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 cba8ab2d22a2e1c6d573a0af6f484394ea1f61caffa016b6aafd046443acbd28
MD5 805e178d5047d0595f35bb62dfd84ba9
SHA1 c9d927d6e5c2d84e32b290a2aeafdc9f445d2c74
SHA512 75ca2065142a99721b668ad5ced0193439777c31e80cea731722d121d4a9332681a61093ad22a8e4b549591f1604dcc3c39a08ebbca2d4000e2087dcae642336
SSDEEP 384:wZcIhsNxthEzilnxe+C5ddJrxuBeRs9JKgqijUAu1:OhLoohzhxuTjKgqmUAc
TLSH
T106928C3058746D7B99F6F585F48A36175FF88027E7C52F90D1EDEF0D02DAAA8230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f0b8e081ba1eba4f18e1472e07b33c42934c07746824eb616eabe66fbb1e0fd3
MD5 99630b2507ceb1384001c0690fda6309
SHA1 0398c5b936c214554ad29b10c5a5b76661c2eb96
SHA512 5b1cb91aaf531d483e1036699d622fe4e51697ae299a01b2eeccabc635c2600f88faa21d21d8f6f81a967adb290f29ee319fe241de7bd562c418efc88d9b7b89
SSDEEP 192:JONw6v+YLNQmiUyBoZh+CG3+FdeqmpvusTOU6:JONw6vz/rZh+C5daiU6
TLSH
T12102FA35A8782C6B9FB2AE45F48737135FE8217BEA912F84D9D82B1D01D775C2302826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7b80ab4194548c23c527c169d18c11ff1d081b2ac00332d736a6279fe8e737d1
MD5 4e8d7626ffd2ba0a9204b323432811fa
SHA1 fb8ebe4b617a70f527bd6fc7a58e197a3099995a
SHA512 fff7a51542ecccf1c55e85cc5c497b6dcabf4f1a8e481e316c677411a042027a3f1077d2d639e62c337897694970ba4554b1f726bb9e3f688cfaf6e08ed9324c
SSDEEP 192:4ON86v+YLhQmiUywoDh+CG3+Fdeqmpc+pSJriCHRq/U6:4ON86vz7kDh+C5ddJrLuU6
TLSH
T1E9123B35A8786C6B5EA3A544F48735139EE89137DB8A3F90D5DC6F1C01EF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 a2f0d6949323d63fe7cec5b03b8d632ba99a151e1dbe72341a70f1e4408c5329
MD5 ac85c224802a09c9be8614e839c44824
SHA1 71c866be82dd3c8eae21625ed74becde182b1e11
SHA512 fc74231bf050c03878001e8182e1db2cf3408b4838dcbecaa4d8e3300fe42da61b8822652966ebf50d7313db290df52806d2a0a1b231cf5440123ab2ab7f9815
SSDEEP 384:TiFiZcIRzsND8TUNTUlIlthEzilc62e+C5ddJrAuBeRs9JKgqijUAu1:+FQh+wg2z6BhzhAuTjKgqmUAc
TLSH
T19EA26E324864997FEDF6AA85F54A32178FF84167D6C1BF90E2DDAF0C019B59C130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2183e1d878a8f13a5d720b2deb8e3b7f62106cb0f58128162b1d8942bd5b5c8d
MD5 8d2c080539b76d53b13000d866b40cd3
SHA1 adfe9e0f35285599831c719b5b2a5581999c8fdd
SHA512 875e0a3fd6674ced4fbae5023521ab4632a68844c1519ff6173610980e9d29e8037e79f76348be433cb00f7cb403b22d97d789d9d029d1d730e071110a99e9dc
SSDEEP 384:TiFgZcIRwsNN8TUNTUlIRiTgEzi9dBe+C5ddJrTuBeRs9JKgqijUAu1:+FeyUwgOs4hzhTuTjKgqmUAc
TLSH
T1F6D239F148D7957AD9AE9747A37E2D024EBCC023F5806A90B3D89A0CCD960BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 be4404df3ba5943f4bdd9d03d47713d5bdc2ef1213d68857b33b0f9559f5070c
MD5 8edf6d9a7f4840bf4d6145ab1d1c0296
SHA1 4db6bab5a228af796f28793e5f35010aff0d2898
SHA512 e35d5861366ecbaf6497f7f637e8c14746c1993cb02eb29063bd67ad01f6f7a5b963829c19605aedfd1165721f4089b8eee647b113aed63751a17f313b23eab1
TLSH
T16BE00113D39544FAE42C833140872F262DFB943112F247566E65497D3C773657E34E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f24a83d5721462935be83cae994ebba3f27c5cd438c47124581ecd36005a9d7a
MD5 29f7e71ea3c4e3d6b2f69f5900410197
SHA1 06b5eab3d2e3f4d85ba8305c9decb104b33d16ff
SHA512 64c813bc1ba7d5aeb0f184c1a9b7fc53f75a2ab678a76d1a7646e7fbe3c7fa1a2de9fb14c4ea11514a7b39da1b88f920d84ab331ae52855ee4ab0111316d137f
TLSH
T10DE00202E151000BD035833040C7262436F0900003330205B15946753C173045A10640
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8702d531bb2a6ddb39bd55da56d2ec558fc4cf3982bc146d56db7644b2184356
MD5 6160f20fe513886d37d34a3a430dc085
SHA1 25aa992d68156459f8a937e6d647be60f71808f0
SHA512 1446eb3d964cab7f8518eedc1825afff9847c978090507ac72f7419fd8ac217677d612a3bff1986fd3170853ac017ed5a4e4e2db1d42d60c8996fa47ae7ea52d
TLSH
T120E00913A35604FAE03D8330408B2B252AF7943113B3425AAA69467A2C67314AF30F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d619a1e3f79d94a7981c9356d5990b7049bbdaf3e0f7670bf376f28f283e62b6
MD5 453487e843e9d853b3b1fd729cb62af2
SHA1 e1e748cdc17ce365a5f266833e47ed38eb730b3b
SHA512 2c9c3701ee2fb98bbef6a691b307fa3168e625bd8880a6f96cceb60e641a04c99b6461252bf031573f9727fea01ada79a657bf42c96ca6c0fbf14144395a93ee
TLSH
T107E00813D35504FAE03D433040871F2529F7943113F342556A6549793C673246E30E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cc976e146e0c28bfb3733baeb15683a0f9b9d805eea6ad25393f5a073cd02585
MD5 ff465f2fc9e9c87cf783d537ac6ef957
SHA1 bd5fa1241ccd15b5b4f76dbd339bccca291f6e74
SHA512 7026a35443cb702b1b6818ec64f78cf684d79ed8e80875f8a43a93010a03092b86aaa4cc95e1eca51ac85f6f9a4e7fabd8bc50e12d6efc6e3004a60e80a9f4a2
TLSH
T15AE00813D35514FEE43C433040871F252AF7943112F243566A65497D3C673647E30E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0f99e192210db713735b2e02a3ccf371c3bd58a3c66a3292d5df1cd472bf7912
MD5 6ce69e2b411dad4799b22506c3b7e814
SHA1 679c3c088fde4e4c517b4f2594e689070872cd15
SHA512 f602afa1d41c00323c4d17e1315cb470a6491477283743a1767389648bc15270aa48def5b14daa2405a7ee323bd274aa1d2c043110c0cdba3ea1aa770502bd1d
TLSH
T17DE0EA03E34504FAE43C473040872F6529E7803112F2061A5F25896D2C333606E34A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8b7ef20783ec70911152ff555fa711761c49ca8b3ba67e45712d6ea260b2b96f
MD5 e2e1e00efa627b6fe211702f743de3a5
SHA1 8073aa35a8affb87962e36103f87c1c9baac8d9c
SHA512 bdc572c052daf4bfc5423606e3e6a3cd7b332d0be4ca4f3e833aef3f1fb805812561c97e3a12e68a2bb1b047ed43f489629b58ec357b6f2eee046435a38b0230
TLSH
T166E00112D39504FAE42C833140872F252AE7943112F243566E65497D3C673656E34E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3b0d71fe0ec8434d7a38dc4cb7b18fe27cd0c65af80651a87b06ba783af19844
MD5 8d6984657bfcfaa5b11f0666acb6ff0d
SHA1 bf528ad211104fc41cec7a28a7a28e8b9e1fec04
SHA512 ecf230c0de4878d0c4dca324a58273c0cce28141ebfb630a4061e9480f10a350fbeddacc9016de6fdc229b7fcd8229de10fa2b2c1b4e69b64263dd0e81c73cc9
TLSH
T101E00113A35500AEE039833040C72B353AF6903003B3024AAA6946793C273146F30A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe595579.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe595579.TMP
Size 392B
SHA256 29d6c5be984c0ba9524d20d6bdb582c414a9f4577ff2bc85b9bb2e65a2b6b64d
MD5 2d976eae16c5b302f21449cdc388ec07
SHA1 cbb037d79e2ccf2a788c0fde6f867769975a3e7f
SHA512 55504ce1ca07ee796fdc13a6e71ca9165f59c2ce9dad0d55ee2de58237ea0a176d1913b3cf18312d53608676216ad0ac89e5382a0e21e4dd348907ca468b1b75
MD5 SHA1 SHA512

Submit Download

a12cf314-9045-419f-9eb1-849cdfb80c9b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a12cf314-9045-419f-9eb1-849cdfb80c9b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bcc151340540d6fed8df98ee401fc55accc43708f59927689e4f17daa055a3b4
MD5 c3ce0d8f72bfb71b294c3be301f3b350
SHA1 cdbe00784bb9f8dc3c14ea6e56f8f66de662b88d
SHA512 ab93c92591d44035d220902813db95ac318ff4394c116b851d6217e6f5119a3e8bff2885d79c2ee31c03862195a5c9efaa860d5224b23660ab22bf126c908ffb
TLSH
T15541075CA6EA1148B3B7AE5AABF6596E487FB8372E46D45E00100D4F0A72B44C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 1f89faec4442beacd5eaccdfeb5a961b406298e33d2fe893a4fbad7fc4e23be5
MD5 8d4e5fb3ad26d96bdfeaabe800d27b70
SHA1 e382c103d76240b99bde4e929c9d676f5f2cb754
SHA512 4182f6ad19d23ed9c63ef17b1c126a249ba7661baaf95ae26ad1ad4895d47733091868bc8e4712e8b5f9e67679b659b6635f630ef9d119ad3ab82495f3063591
SSDEEP 96:XsFzZzmJjz66nXjwsnX7vvMhzZzmJ7qvwkCvMhzZzmJHHK+NwiitMhzZzmJruDJV:5FNXBX9tF9HKL5fBIV
TLSH
T10E322D942BE92612F2F7E9B2E9B17710AF36B81259089E0E408082491C73F01D97EF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 49b63799c26e610a6ac7ff993a85daf0ced8ab878d84ae3f024c25362d70f0e2
MD5 68c8e5714202233b1519d9c33df6f44e
SHA1 78e7a07bb073bd27b4587766b84be1ffedc009fa
SHA512 b69a81170c58fa22cd98b523affdbe16707bca2e1cb100729ea23ef7e5b3ef86c42f6626e5ee9a79e85b6ee408d69383d0637678031e456d787a9d3c7e1866f7
SSDEEP 96:JvMhzZzmJ6fFVwmfF9vMhzZzmJtDXSYzLHHJ4SzVwAzzfeMhzZzmJlCDuntMhzZn:3qFJF7fDXLJ4GnzYjCD85dBIV
TLSH
T1F33221846BEA2756F2F7EEB2EAB27720AF36B9165908990D408041491C73F04D93DF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wps_wid.cid-1382536856.1786408275.exe

Path C:\Users\Admin\Downloads\wps_wid.cid-1382536856.1786408275.exe
Size 5.2MB
SHA256 c0e9eb2964fa4280df55ee37b81870932681d30532d0826a855f72d6fc747b19
MD5 775ac6d76091d45decb651eca1bd3a3b
SHA1 2857865c4ccdb7ad3407ce455c99f833a4250148
SHA512 452a30732f73b9c38ed782dc33151c050d0ce6424e147742c7b9f54a5866cf155345a1da87d717084ddeab721b13423f8940fbc0b3fa7f99fce770b16653689d
SSDEEP 98304:stS/VIU7tRSoy6ThzqR4oza4SxpweHECY7tNba5/y:3uEY+pwevY7tsxy
TLSH
T1B746B011F685C5B1F5D201B0597AEB7A983DAE28573088C7A7D02D2A88312D37A37F5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download