48e57256c693fa6e5257d12ca039252b7e5c0e48e7ef530bf00b71542e89344f

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 15:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fpsboost\MC-Cheats.exe
Size 3.0MB
Sample260816-spfpqadn4y
SHA256 48e57256c693fa6e5257d12ca039252b7e5c0e48e7ef530bf00b71542e89344f
MD5 79d49179f469a4edfc7b572bc649a91b
SHA1 62ac85eaa23e71211f2bbc33dc00ae84f17ae9a9
SHA512 b4da72cffc8968ccf2da59351400690c1385520982c16b28419d6457f53f6a2b5dfa9d590425794a64ea74c700252f5a599e769496342cd31e52f02238a195bd
SSDEEP 6144:kCZIj3NqHErkMJkiJCpMcDwfrpvvWVI2:k5j3NOEr5qiHcDUVvvWVI2
TLSH
T1DAE53B4361C1A496C3A4DA3805E0FDF4D322EC32BB935A86D2D0FF8A7D355847F29996
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3976_1004417012\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3976_1004417012\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3976_651510149\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3976_651510149\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3976_153485519\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4948	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313670880412066"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{B52ADC66-188B-42CF-90A6-655075A107DD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2940	msedge.exe
2940	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 48 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3976	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 476 wrote to memory of 3976	476	MC-Cheats.exe	90
PID 3976 wrote to memory of 2844	3976	msedge.exe	91
PID 3976 wrote to memory of 2688	3976	msedge.exe	92
PID 3976 wrote to memory of 4948	3976	msedge.exe	93
PID 3976 wrote to memory of 2688	3976	msedge.exe	92
PID 3976 wrote to memory of 2688	3976	msedge.exe	92
PID 3976 wrote to memory of 4912	3976	msedge.exe	95
PID 3976 wrote to memory of 4912	3976	msedge.exe	95
PID 3976 wrote to memory of 2752	3976	msedge.exe	96
PID 3976 wrote to memory of 2752	3976	msedge.exe	96
PID 3976 wrote to memory of 4856	3976	msedge.exe	97
PID 3976 wrote to memory of 2752	3976	msedge.exe	96
PID 3976 wrote to memory of 4856	3976	msedge.exe	97
PID 3976 wrote to memory of 4856	3976	msedge.exe	97
PID 3976 wrote to memory of 1964	3976	msedge.exe	98
PID 3976 wrote to memory of 1964	3976	msedge.exe	98
PID 3976 wrote to memory of 1964	3976	msedge.exe	98
PID 3976 wrote to memory of 2716	3976	msedge.exe	99
PID 3976 wrote to memory of 2716	3976	msedge.exe	99
PID 3976 wrote to memory of 2716	3976	msedge.exe	99
PID 3976 wrote to memory of 4208	3976	msedge.exe	100
PID 3976 wrote to memory of 4208	3976	msedge.exe	100
PID 3976 wrote to memory of 5644	3976	msedge.exe	102
PID 3976 wrote to memory of 5644	3976	msedge.exe	102
PID 3976 wrote to memory of 5644	3976	msedge.exe	102
PID 3976 wrote to memory of 5228	3976	msedge.exe	103
PID 3976 wrote to memory of 5228	3976	msedge.exe	103
PID 3976 wrote to memory of 5800	3976	msedge.exe	104
PID 3976 wrote to memory of 5800	3976	msedge.exe	104
PID 3976 wrote to memory of 1280	3976	msedge.exe	106
PID 3976 wrote to memory of 2848	3976	msedge.exe	107
PID 3976 wrote to memory of 2848	3976	msedge.exe	107
PID 3976 wrote to memory of 5728	3976	msedge.exe	110
PID 3976 wrote to memory of 5728	3976	msedge.exe	110
PID 3976 wrote to memory of 2100	3976	msedge.exe	112
PID 3976 wrote to memory of 2100	3976	msedge.exe	112
PID 3976 wrote to memory of 2100	3976	msedge.exe	112
PID 476 wrote to memory of 4988	476	MC-Cheats.exe	113
PID 3976 wrote to memory of 5260	3976	msedge.exe	114
PID 3976 wrote to memory of 5260	3976	msedge.exe	114
PID 3976 wrote to memory of 5260	3976	msedge.exe	114
PID 476 wrote to memory of 3044	476	MC-Cheats.exe	115
PID 3976 wrote to memory of 6112	3976	msedge.exe	116
PID 3976 wrote to memory of 6112	3976	msedge.exe	116
PID 3976 wrote to memory of 6112	3976	msedge.exe	116
PID 3976 wrote to memory of 5580	3976	msedge.exe	117
PID 3976 wrote to memory of 5580	3976	msedge.exe	117
PID 3976 wrote to memory of 5580	3976	msedge.exe	117
PID 476 wrote to memory of 5116	476	MC-Cheats.exe	118
PID 3976 wrote to memory of 5920	3976	msedge.exe	119
PID 3976 wrote to memory of 5920	3976	msedge.exe	119
PID 3976 wrote to memory of 5920	3976	msedge.exe	119
PID 3976 wrote to memory of 5772	3976	msedge.exe	121
PID 3976 wrote to memory of 5772	3976	msedge.exe	121
PID 3976 wrote to memory of 5772	3976	msedge.exe	121
PID 476 wrote to memory of 4988	476	MC-Cheats.exe	122
PID 3976 wrote to memory of 3152	3976	msedge.exe	123
PID 3976 wrote to memory of 3152	3976	msedge.exe	123
PID 3976 wrote to memory of 3152	3976	msedge.exe	123
PID 3976 wrote to memory of 4184	3976	msedge.exe	124
PID 3976 wrote to memory of 4184	3976	msedge.exe	124
PID 3976 wrote to memory of 4184	3976	msedge.exe	124
PID 3976 wrote to memory of 1732	3976	msedge.exe	125
PID 3976 wrote to memory of 5848	3976	msedge.exe	126

C:\Users\Admin\AppData\Local\Temp\fpsboost\MC-Cheats.exe
"C:\Users\Admin\AppData\Local\Temp\fpsboost\MC-Cheats.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x2c8,0x7ffa484ec188,0x7ffa484ec194,0x7ffa484ec1a0
    3⤵
    PID:2844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1972,i,15035043414817183798,16260285794501576924,262144 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:2
    3⤵
    PID:2688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,11197141748500028891,17951971929719811934,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,10583681428944909183,7860915598182234585,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=3356 /prefetch:13
    3⤵
    PID:4912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,17559683489225974388,11553692272642393397,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:2752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,6559723307115562754,12651650300004547226,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:4856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,4766609590850743152,11145572791362202120,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:1
    3⤵
    PID:1964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,15999437025683362265,14688216898811159781,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:9
    3⤵
    PID:2716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,4721065713108453850,13882620983089890142,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
    3⤵
    PID:4208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5240,i,4755207372581880901,500448634673152124,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:1
    3⤵
    PID:5644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,7685979467701561534,14463221377647158133,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
    3⤵
    PID:5228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,1892152469398883499,5387377887043713627,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
    3⤵
    PID:5800
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,14116874810490479017,3875393334934276838,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:14
    3⤵
    PID:2392
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,14116874810490479017,3875393334934276838,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:14
    3⤵
    PID:1280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,14571233644320251536,16423500132259447007,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:14
    3⤵
    PID:2848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6824,i,10942809449998194534,3894602447573678374,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:14
    3⤵
    PID:5728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6824,i,7215717416227133163,11640795266179556302,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:1
    3⤵
    PID:2100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6956,i,3997408091107672497,6628730964249526121,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
    3⤵
    PID:5260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5320,i,17932192036903433828,6358345256990758888,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
    3⤵
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7196,i,1292582522090387225,7708244612874485130,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:1
    3⤵
    PID:5580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5136,i,8965729306819980369,6782984819498530036,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:1
    3⤵
    PID:5920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3736,i,4121425529294439241,17490529990342464599,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:1
    3⤵
    PID:5772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5048,i,12856616100168658350,1804600248780851577,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
    3⤵
    PID:3152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6292,i,8133239135138355634,13481191310123931597,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:1
    3⤵
    PID:4184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1412,i,8504018774931389917,3250012776763473584,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=1288 /prefetch:14
    3⤵
    PID:1732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1424,i,5770150962326021613,2743146138644402767,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:14
    3⤵
    PID:5848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1432,i,2380093949879523195,1103943174263392806,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:14
    3⤵
    PID:5072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6372,i,12772322687022375123,2818996873991732427,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:1
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=1728,i,7555200830191062188,7056081050872126813,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
    3⤵
    PID:4224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7308,i,15256715296080834922,16680654767748099369,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:1
    3⤵
    PID:1472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5408,i,15952331816713684086,15456292977882843158,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:1
    3⤵
    PID:2828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=1416,i,2967304991196163394,6009479546067447309,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
    3⤵
    PID:5084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7796,i,16723112173829187358,4392944551336059767,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:1
    3⤵
    PID:2280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7580,i,6409655590389924566,144939409311726157,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
    3⤵
    PID:5528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8060,i,6317806780874178624,14831670269627255803,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
    3⤵
    PID:1764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8024,i,1853333633176527778,6156024788586008042,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:1
    3⤵
    PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7952,i,10942524644413309607,16873468923343856476,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7940 /prefetch:1
    3⤵
    PID:4676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8372,i,5992328585765696416,6513620844723943246,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:14
    3⤵
    PID:2216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7996,i,14615922907877702790,16409961629230591075,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7468 /prefetch:1
    3⤵
    PID:4988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8648,i,3249569921893187126,10476226206214103972,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=8276 /prefetch:1
    3⤵
    PID:6224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7956,i,15056283967531378232,9538245566273233432,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=1412 /prefetch:1
    3⤵
    PID:6424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8212,i,3221786680189152575,11710696107798530114,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:1
    3⤵
    PID:6708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7372,i,9268287134104953869,14664304644476969918,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=7996 /prefetch:1
    3⤵
    PID:6864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9080,i,10153421120918693512,2287664856032591073,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:14
    3⤵
    PID:7120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9080,i,17789938304895466691,16708268587100721050,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9072 /prefetch:1
    3⤵
    PID:5476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8944,i,3304991938022674614,3987125267502415294,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:1
    3⤵
    PID:6196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9036,i,5491569302290611123,9251720292368383982,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9024 /prefetch:1
    3⤵
    PID:6448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9280,i,15729668763296188274,17574714131182493167,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=8868 /prefetch:1
    3⤵
    PID:4920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=9324,i,2721572001132802311,528594888549866285,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9348 /prefetch:1
    3⤵
    PID:420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9268,i,5273080802631283613,5007830023496840630,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9100 /prefetch:1
    3⤵
    PID:7080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9492,i,9594541731623695647,11011895342130245818,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9284 /prefetch:1
    3⤵
    PID:6192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9648,i,17945514324227092532,1355294290781283310,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9660 /prefetch:14
    3⤵
    PID:2976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9728,i,17152150506386375511,14122583409806447016,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9708 /prefetch:1
    3⤵
    PID:6592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9120,i,14874743059371477092,15079440277308681354,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9084 /prefetch:1
    3⤵
    PID:6492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9680,i,5770608787259533265,5103097655625283696,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9612 /prefetch:1
    3⤵
    PID:2448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9868,i,6180664136565559772,6786923594161407548,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9860 /prefetch:1
    3⤵
    PID:6252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9820,i,14706626757951906871,10080929167948079836,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9996 /prefetch:1
    3⤵
    PID:7164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9772,i,16474710803182765628,3306619999577067802,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9856 /prefetch:1
    3⤵
    PID:6724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=10152,i,16434993582438838457,1817762692481162477,262144 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9716 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9660,i,6529858837330272704,8049957931416283820,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9748 /prefetch:1
    3⤵
    PID:4844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10160,i,17490374268159703055,12328435919592223719,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=10220 /prefetch:1
    3⤵
    PID:6700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,16267644096519620015,3377718842390321596,524288 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
    3⤵
    PID:2012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10136,i,11814557948378081494,4040613088970060115,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=10200 /prefetch:1
    3⤵
    PID:1836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10404,i,16193002507119246697,11312156026963662405,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=10368 /prefetch:1
    3⤵
    PID:6680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=9700,i,17183572852466537538,8986184304304578394,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=9768 /prefetch:1
    3⤵
    PID:2752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=6000,i,9802785379483547939,15565875829471300223,2097152 --field-trial-handle=2536,i,16584453500783984887,8754338356888921132,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:1
    3⤵
    PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:7152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/xSURpWM6rQVTh1f
  2⤵
  PID:6036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2984

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000050

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
Size 55KB
SHA256 6122216022731d91e68a70b262c99f4179ac9e7c2032524ff3ea45fd94519bd6
MD5 fe001de3be45eb82abddcbe48a6de69a
SHA1 4f64ae86a63f5524c434a78e92be8b2535213a1e
SHA512 fa7cdd1adddbe39b0497fd9024434edc2455a770e1d1f69e0caddd2141ca623de186c2a8f4439b5582d5c9fd71249046b56c9a6ef6982a555f6aedd65bf77749
SSDEEP 1536:M6iSR125a6zMnrirRaesnoeZPrJ4eWPw5OlXTvSGmBdk0i:9ClMnur8esjJ4nCOVSHFi
TLSH
T14B4302D51AE5788A1769470DEE03B44D949F1EEDFF80ADB6D48ECA8ACFB84744B83110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 42KB
SHA256 f0b38922fdf9c0ac73f78bf071a639d8c1cf7e81789a4545b00f2010cdd33197
MD5 def455c743bf7aa48b2f6a1aaeab36db
SHA1 b9f5549b1f61bcc7f477973bece15870cdeddb83
SHA512 a8b0adc7bc90a3131c102e3dd9d96a05f3acc713493393036697bf0d75baaa5d36b089a7f32d9ae8a9ca3a6d10df706263670598877c4b79c86cb6c197a53337
SSDEEP 768:MQh9TUW//tToxCEvat+59X5Pfnty4bB5b3FTyUynWM3VEfwVRKxY2penBVvk6KRm:Vh9p/t0tCtQz3Z15RLL8bWY2penrMnBG
TLSH
T1F313F169A80E2528F68E5B580130CD9F79B9D701F4E3352BE645ECB3B4AF07B84B05B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000052

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
Size 30KB
SHA256 276b50639b3e8fbe4b4459513ecb68ab82973b84d49b6db67b4688df36ca559c
MD5 8662c673de81c12dca4d43967e6ea48d
SHA1 d51f4e8cbd8a05224bbd685d29adcd3b5d59821f
SHA512 db80523abc5e9a908905f2d74b4f954047ea17966744ca46de9a798b585e7c36f4e53465e302cadedf1005a53d97bc261ee0c48faf338e46acf7cb5c4b5725c5
SSDEEP 768:LsAmJTKwYe553dX668JDy6CngqNLTLuoO5hB25FwW:uJWwx5j66gD7CnXNA+
TLSH
T1A8D2012A13F4D64487945E723A3ED3100CC21FC79DF2E1518D91E1B0B1FDC2A1AA39A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 21KB
SHA256 a20c7317c68e136b8fb60dc720307823ad49d5418d4710ea05a2137284580306
MD5 1dceec81146ba156dc8c0f4c15d051b7
SHA1 ba4b8c8c9b771f528ee6964dc77e942a8ececbd2
SHA512 4821b474968f0660b3cc2b2c02d758839ce58928577157a1dc62c0f2edeaf13d0c25443dcc75dcbf92836e95d870d33778dfb008722bf585598fd00110c9b85f
SSDEEP 384:RPniwNLvobQ6TzYK62vGm9VntEr+CYnsbb2EhYSPfBabpInwy:Gk6TzYKf1tbFW2EhYSxaVawy
TLSH
T14BA2E065B32173D0ACB973931AE72150FA0E6DBF1400CFAE47E3F69499FD1626428E19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 22KB
SHA256 d30e9262d7e349219dffd4dd102bf90643c4a824ae047c8c5dd9c18bb25c067a
MD5 3c42da6dd93995be519eebc3c422ccfd
SHA1 4254d474a52da03af735c3cfef6009d3a5be73fe
SHA512 7e362ac888fdead65345c46ac4f60b127cf276a4263ccc1d6795bf29c72b6c9a80666b53eaf33061cc933fbc621d869d2d4b7550acc898c6daa7755b06774449
SSDEEP 384:uB1tzUHYlOX1Ygc9WrCZMmbrhINughJLUkpU9XHriwoZIwmDaS8K/QOf9dS:2zIYlq0q8NnhI9nUywoZI0S8K/QOldS
TLSH
T152A2E115876F7B7779BA5B128F138FF65E50DA2DE04DA4785CD580A33710380CB2AD89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 158KB
SHA256 d7170168a4a7e1a2027cf4b9cf99f0033821da4535adacb05a637fb1194cdf88
MD5 5df8e4c7eb8f234fa3f6f8d95c9449ad
SHA1 8a1f0032aa679de8be7c9fa6155473ba23665b9b
SHA512 6b004d8260d1d40eb589ea57b27bcdc7969056a4e989e953d831900e91c291c03d490dd5040bb6fdafaa2898a80bb20ef1864702be3be20d0d79b5ad2d68d902
SSDEEP 3072:nrCbGewcN5l0/j2HTBl+a44lLS3DGmkez+LbA3rLkM8NxH:9gD0/azBQ443DyemcfU
TLSH
T178F312680C96645EE301BF2992D22DDC8E61A35127F2E255FC6C64D2665C8BCD3EC8FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
Size 161KB
SHA256 2600334c50aaf51f8b37c4f7fb9cbacd72b19dbe88a556c643daa5bff2e1476e
MD5 116e22b227ffcf0645d0e263a36d3577
SHA1 0f09da6ae057641c1c2d8fc4bcf451918c12e981
SHA512 da673edb33a6e898e7ec5ec9f6b20e66e403a0ecbda850e1b5e34a26422973bb81561254f7430f2521bdb2ef0b29f445fae4098e959056eaf964ee2347fbc41c
SSDEEP 3072:NbA8dCAG1iZ0Nmy9nyfoJ0lig+bby72RtATNeIuMmubbmS:q8dCAGgwnLCliE72gTUhMfbP
TLSH
T1CFF312ADE330E5042BC2E437C6E02E791D576A8797762ED4EB2B5049F35C9AA5263023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
Size 47KB
SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
MD5 260c81a4759baf163c025001c4f27872
SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
TLSH
T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000059

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
Size 21KB
SHA256 485b19a448838d7e03c61e8d6d7f7f20c9f7f234d87ae12811441ed648ca2b11
MD5 7321fa7278264b45ef2351b1adb19ef6
SHA1 df47f2b3bcbe09d1443308522699a1c890269846
SHA512 f704ed4a10f62af659e177a2babd1d32f562fdb05d169b54af9a321cde6b84c0c0005e3c79a3766201efa3644a2c3ddc54bd6591b526c07deb1cadd57bd854e2
SSDEEP 384:D4eM/XmoXDFDt1xoDi3uqD4Uylqz9Jrrh8uYDJlxJaA9zxjWdJdfpFfIXL4C:D4e5ozFDDaDi3Ed0JyzlSA9zxjWdJ/FY
TLSH
T15FA2E0AE2955BACA381031F527F69C3C30449133215559333923FF8EDB38DAA654D63A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2869553022642664_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2869553022642664_0
Size 258B
SHA256 2623e1a682168c49c6442ff0e49575e80db527645cf5c23b3fca903a798f8ddf
MD5 0ec149a860278adc7fa4caa670a3fa0f
SHA1 fbc43e921f79256df496aade8c61c88557ef7713
SHA512 6a4ee92cbf95d6c5d5f678cf80d359cc8471569ff7b03c5c58a525397d7e48a65d3bb4f93bcc9f0b06e1f8ea28d9c991aef9304c979a0d06f0422883c05b5851
TLSH
T1D9D097AB86402801EA7E86F3C2B213E891B30438078C4140501AE0F300235B0A2FDA8E
MD5 SHA1 SHA512 TLSH

Submit Download

2cc7b7571189dff4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2cc7b7571189dff4_0
Size 704KB
SHA256 f8a77867c79e1683dc83d8e2316bf5cd860798fbb3a44af28c2605584d213b35
MD5 e79fd56fbdb86042e0b90e195a2ef7d2
SHA1 d7c163d510402d4463038e9e95dd936fd62cf523
SHA512 bd36e3709c5084fd1c4d226f1f3d5b3a896fa7914cf3d4728568c6d7097dc4ca956d90bcbe180348c9a27ff2cba60c36d90de71189f435f101ce88232a630edc
SSDEEP 12288:vzjdooMFTtXI8ka7N5fqfZRH1oFiKRmCMnz:vq5gUPqZ
TLSH
T174E4B300DF91BF35CBF657B542D3D527753A014E2E93914352A0AA2A2C1E2EE6E97C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31b4148ce7d86e93_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\31b4148ce7d86e93_0
Size 47KB
SHA256 18741fc7fb56d43c73f4da7de952631d656055e339e248af2584cd1430915cfa
MD5 06c0877652fb93d014bd821f2839b068
SHA1 f3be58e73104d15b42c5e747935312c9514a8164
SHA512 b1b998e51ed1431cddd65007b3117313b23dc183684d71e406eb4ce2b78b7ed10571b796d207d2b749caae0f3d9bd2db47aa8ca6099b0ddde44ac88799a38d4d
SSDEEP 768:rLAMyELNPDMPoFQBUmrN48JJ4gqc0W5TReloQH68xVj3Q:vAowPKQBU/YJBquTA2q6Qjg
TLSH
T17123851923A198EACE3733FD41F68BAA6371951A3AC7D70771EA933A3C010D85F9191D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32b9f23b7d6685b8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32b9f23b7d6685b8_0
Size 58KB
SHA256 8a7e5df35b373d0ac8d693511f2a481ecd6b15a4cc3870e42f7a68a115e30761
MD5 83d7ece520cba25772d2b8f5df3a4fa9
SHA1 5ba9b06024938054cf99797349b20cec885d9dda
SHA512 ceab5d28e5997fc9b30b8ab7be8059c90e0cd962c1e6ee3a870a9fab9e1cd228fe07bad83410c30072040b3d36a92b78c51965793617bd5cf2320ab279ecb930
SSDEEP 768:Q+sWpwKSHCHhPif2KVPgLemD1g6NBzN4AV1YV8tEwqFU4ba5aV0H2+G6eGmWA:ds0wKSGhw2ZT1g6NXDbCa4bh0HY1D
TLSH
T1D04308CFB1D2A33198E361F2451F5549A27E75160C94282FB969B7F42A3188F903EF2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ab74fdcea522fcb_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ab74fdcea522fcb_0
Size 724KB
SHA256 4b8d1a5611ccbd87bf46d14bc616e757f1a7422fe67ddb33cf40cc4bdafbd688
MD5 dcaa995f132b60e08a241c61ed6e9e2d
SHA1 e54ced73380cadaf8367d21250f987eca03bd7ea
SHA512 979d0cc2d2b7eb613c3a574a281737a555429c30f88a29cae78bcacd7d71dc727c8a64736764305ebd36b08797f8b956566fade3c64f04c44d73a74390be83c5
SSDEEP 12288:Dt02rtntFFWDcCB53iPbfJnp7BvzDXIzZJ6kR/Hq7HDD17D7Dz/LD57pD7lZ/dPH:Dt02rtntFFWDcCB53iPbfJnp7BvzDXIu
TLSH
T1A7F40666D785BE6CCA2552F049A29D62F57910DE2D82B64333E4DB383CC81D44FA7C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f35b69abfa65bb3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4f35b69abfa65bb3_0
Size 265B
SHA256 74d3b7e01005403f160f71ed19aaa40bab1755dcbaddb149bd0576515254b16a
MD5 df13369875e7fea69ddc8a758de60b88
SHA1 d60b9424e50a2c0b3c225d5b2a92bf5eac546086
SHA512 581537d12bc13745291e6c2354a222996e5c9b164fddabe38fbe92741c0f95f93a2703def53350f0d24a67c25954bfd998fc083e7be4f9cf7cd334fb8c5bcc78
TLSH
T11CD097CB110C0C9AFABE05F2CEBA40C984F3E0E41F1D8216B001C1238C60FB08B89E10
MD5 SHA1 SHA512 TLSH

Submit Download

5544cb8c51e76564_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5544cb8c51e76564_0
Size 2KB
SHA256 c1a878da19e9ad6eed0f30b2b45c098fbacc1e386784d53c86c3dd203f16816e
MD5 e801740a4259b75970f60484ef7f651c
SHA1 84ea281406b38b8777ec2438b5657aab2f026c33
SHA512 7d6dd9ada2d563d6d8d4a4cf674831eff56c572e393c26593e056346566fb1b9ef77a2f8f3918ef4cf3140d53d3d01a12b1e9e8d54b677d745e3c3c927cdbabb
TLSH
T1CA5163239F185581CA6576F67695C3335B33C018EFABCB273662A2699C352D02F850CB
MD5 SHA1 SHA512 TLSH

Submit Download

5b143367fadea9a5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b143367fadea9a5_0
Size 323B
SHA256 85f952c3c5428b428218441c7b0ff8d5ad6f5b48107983ad43277529892760e7
MD5 ac691064f11f6507ddb56b79e96e82eb
SHA1 77e5ff08e23257436238c8a72ce611f33a1af56b
SHA512 f14c3e5a7c1ae9b351b96b936b8ea35c2e9e630a6b1edb4218cd76b23a25ca36230b40356cc29a8e2699acdb2cb9591244763ab64b5c478575e118fbc6c3966e
TLSH
T121E07DE328580281D9B692F1CE6256774B2260A519951075740000B30BA46FEA285362
MD5 SHA1 SHA512 TLSH

Submit Download

5b7197c0d9288aad_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b7197c0d9288aad_0
Size 51KB
SHA256 f04c13292398d6b31c8036722182976fcebf1010d34fababa26b1e991cf5123f
MD5 505f807d09ea0bc231d1530ab0f8815f
SHA1 657b7458387adf9f395bbbf06dffc4cf37b69189
SHA512 e904a20e29fe4269e7f07fd500b2940cd074655f70737831058c2dba97ec9f95c34a7b18ac6743f0418cec3e360da1cc1dcba04ccd8729706ec8cd6adc8dd06c
SSDEEP 768:bCksVhWz4bI8da0FUodNU/TOkdg3wkZWGZhGWthGbgszlovo8VkMv0:Nsfk8PdNUCbwuWG3tYpzIS
TLSH
T11633E62A1B904A5ACB3707F582D68923B33542427FD3CB1B31E072365E567D64E9BA0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70896ef5f7627a89_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70896ef5f7627a89_0
Size 244B
SHA256 ef3b7e4ae464924e1d1cdcbb51f644ea33f3eeacb342089049a728f94124cbba
MD5 122f4774d9fe89217703e8fdef857f28
SHA1 bbca22849c62fb75180e2d47dd87e085217dedf2
SHA512 7747bbfb8613df4cd75016f8404580fe5f1b5b27bd35874ac7a976b5cfc0b149462c139834ad277f9b6ec8276955f07c09354a6350c2350e92f2f26604b073c4
TLSH
T148D0A7E3491114F0D85819F7CA799BC1E63681FD5F5D86503435C0978D549B42640961
MD5 SHA1 SHA512 TLSH

Submit Download

75578f5c110c324a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\75578f5c110c324a_0
Size 258KB
SHA256 dbf7f8ece699510fc57a3f82743837006cb9b4bf18e3627e11bba6aa97ca8ab0
MD5 e735d98d04492a1f50ba3f982776e045
SHA1 521ce967efadc74e0dd12a9ad65a824f1f3b7b64
SHA512 bd08c56cad9c681c6762e104a32c0043acd37db850093726bb63cbd6e1a29f6db8a6bd8ad3dcb9d75fba6508056478a4bdeed29528a181229e873e18990fbc73
SSDEEP 6144:VM/z3L0XXY5oR6lS/xRQRKCruCIEs1T7U58bJkC0jeQOlqiK/u//o0G2fLUMZnLh:IjL/MpWNOVCa
TLSH
T1C744B789A384BEA9CF26A3F90562C9277635445F3FC3D33712D0EB253C562EA4D49C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88ad7c9f1f1c9707_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\88ad7c9f1f1c9707_0
Size 34KB
SHA256 96e51bcbef5cce26d7bd06e75dad88a3a3046fa30872a9c3a03522b0077cb784
MD5 a61c7b6b5209e27b5594c49421681856
SHA1 dd009d07bcfbe79e09a13710ee84c92fbb4e159f
SHA512 3118b85b24b5cf92a10fc54f0203951e7c05ae8db63d0a0879066082ecc419a29c24a641620368832366753a3647ad5bddc76b40f24d2ed32191571ec7f4b294
SSDEEP 768:eMlcnC/ap5Zhz64Uiia8rqqygdSTXPQ869yo0Brasp:q2a8Q7emas
TLSH
T10AF2B5422B90EA95CB3613F101628966BF3645483FC3D32325E8B7365C263E6AD1DC6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8de18f9190ddcf10_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8de18f9190ddcf10_0
Size 300B
SHA256 2e5a5d74ae85079eaf90440c8a1d486b1a8bf3cca3feeda76fd71076b03da6ec
MD5 85c6d52774a71321a90bf9050d274a6d
SHA1 6433cb07c5307688e9c33c1736d6dbad69433249
SHA512 394bc9facf54bcb4a7df46d076bc96ccef7d078748774637b7cfba3d1b9f0e14e5be7c1c914b487f7f0b062aba4e56539c3c6c568dda97d20fb1a5b7a53a8822
TLSH
T143E0EBF378201C22EC6C0BF3CF2E8207A72380AA0E2B80A21002C8731E61A7097C9291
MD5 SHA1 SHA512 TLSH

Submit Download

b12d85975979458c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b12d85975979458c_0
Size 263B
SHA256 10a2e246cc9e66ef0761e25d63d83dc08b37b865549f2332e8bcf1be861087d8
MD5 2edf70fbcd5e06de8b553778449ab93e
SHA1 b6c0d8f48e7346ad4b24488e49b1cc1ee4af92bc
SHA512 f30caec98c994954f8af5b63c5ed8a0ae9b550d3d50d2a093cd0e668604f1595ae844325ffe8df1cc219135eae79ad8dfce48d6a31b948cde3270f3a103d429c
TLSH
T1E9D0979343208A10E26F4CFAEB71C38D8A7320D40F0DA3806040CCEF64024B28914481
MD5 SHA1 SHA512 TLSH

Submit Download

b39b63ee0442f35b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b39b63ee0442f35b_0
Size 281B
SHA256 4deff932bd3ec6c0625a3b2c08a21c7127f400dc45a8bb9285a39e0411714d8d
MD5 d9851fa96b8df86b6d26529e31ba4093
SHA1 44d19c058663caa7a1a2457be8043bdfa099ab34
SHA512 7ddba7adee02b25bf4eb637e0f8bb0c9357eb43bfdbf52736002b0fb876d87b8f421684452ed40a202e3760035006d9900584f580a8bcd12467b44eb6f5a78d7
TLSH
T191D02B93AA44199CE7AB28FED3FAAD85C57110111ADCC124A512EE930D2E4F26651031
MD5 SHA1 SHA512 TLSH

Submit Download

bd553e6a16228036_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bd553e6a16228036_0
Size 268B
SHA256 028543d1b1e644d0e5b94c39a81945fe28782f22a6d53d40797d4076640ce836
MD5 6b9bc2703b453740b9f55fc8b06da528
SHA1 1286eca5eaa2bba02f03ac334dad06b4df34953e
SHA512 c920e57101b776eac360e0b7582c6393a40f2a79e56aa2281269a1ece809dc3d4cb62400f8a99078eeed0da0eab421c9d7f436fc5b6f89cac6ab67387eecf81a
TLSH
T17FD097DF987C2884E49C82F2CFBC44DB86A2C5784B0E8C306004D4E3BEFD13030A44A4
MD5 SHA1 SHA512 TLSH

Submit Download

c29a7a0fc042201f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c29a7a0fc042201f_0
Size 614KB
SHA256 296c8f13d92591958896f6daec5c1d6b5a6962f639cf8a284353173ea997ccbc
MD5 5359ff49c25f7eac4baa6aa6a369ec85
SHA1 f3f16e7191d12468e7366bc86eed32c91254b967
SHA512 e2449e72eedfb3144c98b5c4e18f8b672e801b5b086ca4f8581df8ac3492e61aefbb28fe23c432b56f4d24623ee0ca04d5ba8176ce54a2cb99643dd23452cd5f
SSDEEP 12288:MsSPOafsQn/5MJ/G9DPEq2wS1a7Cahq02WMF:MJ3TxEMWa
TLSH
T14DD49585D7C5BF99CB2663FD0653CA673230849E2EC3E32763D0EB292C561E94D49D0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf119b4ef50b26aa_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cf119b4ef50b26aa_0
Size 62KB
SHA256 ac49ce27243450c969e725c7ad978f58260ee6309797ad7bc79a9fb7f1a24cc3
MD5 c06d647aaf85915d6c1bcfaa44a2434c
SHA1 7ff37bdab33ff2d3d12c9d099dd9e193f712cf89
SHA512 0ce74a49687b910406e35bbccd5f5638adda43459f096bbd8ba9e6fddb370154eed565cc02ab26a38696bb742d46f64df83fd43f09511e29552a2dec04430d80
SSDEEP 768:Q4KuUAnGo7Qh/GDutDmO5rVXbW/UdXUdf56qjUuU4mIKyhqQg2rUsrUJwc6Fdyxa:Q4drGd/GDIr4Qk4PIbhWQcZN4
TLSH
T1BE539115AB44AD95CE3A67F442728B23733185883EC3E72772F8B3352C186D55ED988B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db1b718d80db835b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db1b718d80db835b_0
Size 291B
SHA256 31169a5e25793efdfdde2adaa3d34fb4e36353456bb09521e603bfdcf9e6f5c2
MD5 465a1cffd8bd315e5d6b8d57064f9409
SHA1 dcfb45bef97d8728c74667890031fcd51e9f90aa
SHA512 fbc228aa37007f85def9271f05a7ef2c3b2b5e5cbfb96ff25e7808d8e60c458b8f264114dba5364e15f215fd27a7a8af0235edf077324725ae2a97c66015d5f6
TLSH
T13DD02BE322758805CC5848F7DEAAC288E733A0B4562591F0515992F764329725283507
MD5 SHA1 SHA512 TLSH

Submit Download

ec9c25db25c92942_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ec9c25db25c92942_0
Size 305B
SHA256 a99260302946b7c2ce92d79e1bf1cc082e65851cd3fa54fa743409fb2184631b
MD5 3f2ac1c15dda808d12a91e148001f3ee
SHA1 4eb8124549e1563859bde508563a6768a426ac6e
SHA512 136114c85d5f7982a9e5017bbf2533b64b9d3c94ecb648309cc105f585cfa5e665963cac83bc6fad38d4e7365ebbdab29d23340f52b5ec948048565e3eb88186
TLSH
T14CE0EBF3B8801492CBA79BF4CD56AF99C323806808BCC0A10250A1E93F100F0D691BE2
MD5 SHA1 SHA512 TLSH

Submit Download

f196bf213bebb9ae_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f196bf213bebb9ae_0
Size 108KB
SHA256 3edad2cb195d89167a76c1807100a7b35130d55b10e0a1901d83e2500d891929
MD5 f1a45586534b8ee588512ca649937813
SHA1 3bd48c4cf2d5c7a3c6cc04e57aec94c7527c76a8
SHA512 3cad9e16ec30aa17fe735964af05de00d891bd6df011fd7114327b6599cf920197a3597510de5f72cd0c454a39da6ed629ae5e0fd6b0e908f053571fbb8a7b72
SSDEEP 1536:SXR5trC+uCxE54Q5QXGQuJPA7gjWz1cTD/LqKpMEVl25:cg+uCxE5VVNNA1U/5G5
TLSH
T116B3D8751B60ED95CA3657F151638C27A73348087FC3E72FA3A8A2362C4D6D90F9A44B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18a660f3-949d-4da4-aca4-58d017c04a63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\18a660f3-949d-4da4-aca4-58d017c04a63.tmp
Size 6KB
SHA256 ef8246649c1a0e972b032d126e2ceb35439ae0c6731577375fe3ce9eb1ca23f0
MD5 27d222ec37914ade29b8703563ab6b01
SHA1 bf76fed89455ea102c05cc9604587fa8264544ea
SHA512 702f318a4c0ad8ca5eeac65802bc448ca537606f2aafc3b26c8801197661a9c1f482b17f7cb2b26491e23285b9ff9895e807b6b24ef3e400bf7e9d4369ec9030
SSDEEP 192:DtahJfkJcJzJOVaaOL7iYI6QejbExKb+GPRDIjPrpPl:DtaPfAcJzJOVaaOL7iYI6QejbUKb+GZ4
TLSH
T1D6D1ADF3C3E8D56E9C5356F06B246E2ACE2D0A29426C3D16C9D49F5B93E1070E141A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 61c1e394641303189a1788627f26c2a219985abd32b2299ceab0a8715cafe46a
MD5 5c369c3a2f20bf8d83edc443cd001087
SHA1 945a54047136a684d07afabd8b1d0211d3fad70b
SHA512 276b766c9dfd938c1d278d6d5be5986c272ac5e18c657b3062d4057aa9deb1d05c8b54130fa8ce9cd59e8cda75943cff81d3d660d79120c93bea0b5967e101eb
SSDEEP 192:sxRzRNCK/fysCbpaZfz00zYAzoA8pvwH/g6+WNIzZhatsBsomvWYAGufIgDu2J:sxRz6K/fysCbpM4Hvm/5ChhTp
TLSH
T13C42C71A6D28A93B6CC7E21DBA55BF53D3F9503360D42E48BBFC861C04E66DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e6d6de4c059bea53a7a7ce1274536c2bc7c58277f019080b8c27cb939246f8f6
MD5 c149a3beef660843251c70b6098d75cd
SHA1 d75ff6dc49c262b55b59a0879005ab09385ced30
SHA512 8c59251aa8283212ce00ec4f428fc309ebb437884ef76e262709f9b69ee83aeb6d981db695d186d30a6579bfc58035848926eb531dc1f68668a7a82510fef2dd
SSDEEP 192:sxRgRNCK/fyspbkaZfz00zYdzoA8pRw7/g6+WNIaZfat1dDoNvWYAGufIgV2J:sxRg6K/fyspbkM4+R6/5TfcTg
TLSH
T1C942C71A6A68A93B5CC7E21DFA55BF53D3F9113360D42E48BBFC861C04E66DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c0ffeb5031a903ddf3b20699622c035b23d1aca6762393a6663da90cdf07873c
MD5 79d56b581bd6ae0ed75dcfda8af83449
SHA1 d182ca0351f7420045caed2aa49c4aa6dd7ed308
SHA512 76c160da33716f44ed1142e3969a29a880aae21a7eca422efb23c75bca832ea51433b06bd8b0a8c8e782ca7c7c164d4859ac08e71c9c98a665805978efcd362a
SSDEEP 192:sxRzRNCK/fysCbpaZfz00zY5zoA8pRwo/g6+WNIgfpatxN2opvWYAGufIgDu2J:sxRz6K/fysCbpM4iRR/53pTTp
TLSH
T1E542C81A6928693B6CD7E219FA55BF53D3F9503360D42E48BBFC861C04E76DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 da2397c688618daed37cb3a8f529f9bd784806763fc5228a19f359bac8203103
MD5 a0075004536085cfd6f5893f286350f8
SHA1 2f1cdd83ee94019cc0f28ad1a326f6115ae09f92
SHA512 8562ef1945a0b19cf404fafe6ada57d96f2e4fb97cf6bddec895129b29465cd2541339d4ec5811c8fea35555d87b95dd38a83a2775b5c1aeac693e3667eddd3e
SSDEEP 192:sxRzRNCK/fysCbkaZfz00zYDzoA8pRwd/g6+WNIE6Zatuks9ojvWYAGufIgD82J:sxRz6K/fysCbkM40Rw/5KZvFTX
TLSH
T1ED42B91A6928A93B5CC7E31DBA55BF53D3F9113361D42E48BBFC861C04EA6DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 a56e1da0b96a325c183e56e3d3b1679de64c1f2cd417ed0ad98a83a3e89ea964
MD5 c561a8fc23d23205e570975c82c05b5f
SHA1 662a3ab87e486a772b2e4ab6029d9a9ad6b35430
SHA512 3dea09d488c19bc1e2b81f37d8c83ef8b36a4858886a151e6a5833983f236c5e297da37dbcd8a27d1ba87de60fe40e980ce726c5dfc7c5b4a1af0ebac5926404
SSDEEP 768:j26H7o7pLuL7MRWgs2fw28F1+UoAYDCx9Tuqh0VfUC9xbog/OV4eBVuw0ro9le0N:j26H7UE7MRWgs2fw2u1jaHeB4wfo+
TLSH
T1D5D2DB7B640DCABE4F800ADDEC197EDF6D6802CB9698CD8047FE951C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b6fa6442335ca8906e89e8ad3c3ca8bad327ffa28b0513776cf9bce125c96ccf
MD5 19b37ceab228a20483e83d8b6c0500a9
SHA1 5daf65b8394066c3c15d89c21bf8cf146227b474
SHA512 ca36853a3878e8ae6afdb768a9b4423e330096919b47d89b4dbfe51e9057ddb5c6f010eb55e39e0ace4c58b32b6a397e68c44815557f48ac95b4a85e4c77ce4b
SSDEEP 96:KREEEFEwE0EOEyE2EUWESE/EfgE8EUK4ERgE2EUcE0E0E/EuEUEJHGbqGAoouWYD:C3gFB31lERe1JDggH2vHG5FaHGbqGAoV
TLSH
T19091C214747A02C03D7E694880FC9D2B53C2B4E37419E92A7BD812E95B6BE124EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3402034b-b805-4aec-b9cc-cc3377a1011a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3402034b-b805-4aec-b9cc-cc3377a1011a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 10e14235e44c36fc301abc0bebbfa9ccd69fc83f5076017e09d8b1a24ed8284f
MD5 9b34c8ba8a58ace18ad55be3714b3414
SHA1 350e8d97b0cba2b3cf078a705fc45442a3640dfe
SHA512 512b42a119b7721f2e8a2f86b185b8fb72077d60309fe08782528608b5021d4b568bda19c8f0a9a6ba7689364651733444e5442741c1b5dacfd05e90647f97d3
SSDEEP 768:hrv+4UNbdz36z/TBOWCutsONXyer1IRCzniBxeVH1SK7:hbsbV3OySIqnWEH1l
TLSH
T1B703CF36A4A89E338CE2A3D6B14773437FB86057C6840790EDEA2F4E069B59D130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e8d3cd6afff6bc6e12d544fb8414b3e9d1b5100c2137cc7e15a2736697b4e3e8
MD5 e57d0e3b30b2baf128a600b96e49ca15
SHA1 2a791915d8979c139c3fda6dfc4245cc5756ef39
SHA512 91c8b50acacf22f119d76161f79e8e96dc28fd2d06fe8bceab68522da8bc43f3f16b62888d8deaa598bd072e6a4d99edf99a30342793f5b981bc54c94ef023af
SSDEEP 768:Mrv+4UNbdz3/F/TBOWCuttHONXyer1IRCzniw8eVH1SK7:MbsbV3t7SIqnQEH1l
TLSH
T1A803BF35A0A9DE334DE2B396B14773537FB8206789840B90EDDA1F4E0A9759E230F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 327cdb74019c295457922252c82999a526bbbacb6d9c3d906ad804dd99ad65a4
MD5 a9e2332ec8809d1b9a92eec6616afa2f
SHA1 6107ccf789b40e49f61b055649691dc9e1b27a63
SHA512 cb038d9c0c658368462a22b7433a6258729d5850740e6bcf44cc4430385b451dc5f3a19ea82648eef7a39945e99be0c0f1350cbca1c01ebbd7d5953e34f88112
SSDEEP 768:dFQ+3Awgk4FsxsOWCuttlSONXyer1IRCzni98Pi9PXti:s+334iGSSIqn3PIti
TLSH
T129039C75D8A5CE27ACE2A7C6B7467347EEF41063C5C89AD4EAD95E4D00C35AE030EC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1104c8519b94fa69b8c422b5dfc664acb2d059d5181f62581688822f8ee41ed4
MD5 68b2459970a0e247da7213863ed395e2
SHA1 957633869b41ac52f45ee50196a963f237c8b04a
SHA512 7125767915834c7803cd824080a2c600a6cb6f2fecbe7dc011ba1f9c1621e4079965a6fdc242d58f7786b86de2faa361e8143ac152d4de4ad543c5d15043b733
SSDEEP 768:E03q4p3/TBOWCuttHONXyer1IRCzni98Pi9PXti:E03q4tjSIqn3PIti
TLSH
T1C8F2AF74E4659D235CF5F3D6B2462383BEF82063E5C45754EADA9B0E099356E030F82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 977339c77bb1f8e97145456162a99f78d9b609ccb80f56829391f79ac3c99a64
MD5 27aebb10203b6ccdefc1a82e0c6bb2a0
SHA1 ebd2b0683c833f6637f20e33b554afd6be6f69a3
SHA512 28c3c11dcb98330f5364143c8a882bcdfc7147aca7582b82b2967bd5e726b1686165343fb58e353c7db4dd3fa1c50a6cd82e5d49ee3d3e91f03b5f4699deac1f
SSDEEP 768:003V4u//TBOWCuttHONXyer1IRCzni98Pi9PXti:003V42jSIqn3PIti
TLSH
T1BAF2AF74E4659D235CE5F3D6B2462383BEF82067E5C45B54EADA9B0E099352E030F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 30d288f0e1a8cabf70215a66ec9aeafe26a119dcf36fd5559818174e0041289f
MD5 6b49f3e5345cd333cc2aa8a3168a55f7
SHA1 9d629a94e4a8b5d234c79957aa911611f20483a5
SHA512 3110e5b18d7cb42e1f4fd227660c8ad98a80f9b7dfd99699384a31edc4ae2b26622504063aa2c2fa7ecf1be7c27de6d3728938259e51c9733b87935ddcb53a83
SSDEEP 768:orv+4UNbdT3q4+3/TBOWCuttHONXyer1IRCzni98Pi9PXtv:obsb13q4WjSIqn3PItv
TLSH
T1B113BE30E1699E234CF2E3D5B14B63837FB82467D8C40794EADA5B8D098756E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73f7d5ee-44c2-4542-8ebc-e5c4824c2701.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\73f7d5ee-44c2-4542-8ebc-e5c4824c2701.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

ae3e6f6f-7f71-4dde-a033-f406215329c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ae3e6f6f-7f71-4dde-a033-f406215329c1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_551590007\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download