ff824f18d10e0643522612d47cdbc866d80c62544be5846b0036568c3d0c0dd0

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
autosoup\MC-Cheats.exe
Size 3.0MB
Sample260816-wzcbtsvbke
SHA256 ff824f18d10e0643522612d47cdbc866d80c62544be5846b0036568c3d0c0dd0
MD5 fd1dcb0b93ef6deb145c54f61f84094e
SHA1 47708d0e9d1a3e9a0b2f0bc40eb4389e878848fc
SHA512 7295c08bfebb7f28b0f0e392dbfefaa8d2418f3ec929c3d51d271ae1e61b4e3ad7051468b212779014fe17c9398ea5a3b81d09182a4df9d3b30d801a3804d350
SSDEEP 6144:mCZIj3NqHErkzJkijCpMcDwfrpvvWVI2:m5j3NOErmqidcDUVvvWVI2
TLSH
T111E53B4361C1A496C3A4DA3805E0FDF4D322EC32BB935A86D2D0FF8A7D355847F29996
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4688_1313196787\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4688_1674009945\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4688_1674009945\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4436	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313782610879152"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{73263402-5B5D-4435-BAB3-D33FF8F17100}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
480	msedge.exe
480	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 48 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4688	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3096 wrote to memory of 4688	3096	MC-Cheats.exe	89
PID 4688 wrote to memory of 4520	4688	msedge.exe	90
PID 4688 wrote to memory of 1800	4688	msedge.exe	92
PID 4688 wrote to memory of 4436	4688	msedge.exe	93
PID 4688 wrote to memory of 1800	4688	msedge.exe	92
PID 4688 wrote to memory of 1800	4688	msedge.exe	92
PID 4688 wrote to memory of 4352	4688	msedge.exe	94
PID 4688 wrote to memory of 4352	4688	msedge.exe	94
PID 4688 wrote to memory of 2460	4688	msedge.exe	95
PID 4688 wrote to memory of 3336	4688	msedge.exe	96
PID 4688 wrote to memory of 3336	4688	msedge.exe	96
PID 4688 wrote to memory of 3336	4688	msedge.exe	96
PID 4688 wrote to memory of 2460	4688	msedge.exe	95
PID 4688 wrote to memory of 2460	4688	msedge.exe	95
PID 4688 wrote to memory of 5796	4688	msedge.exe	97
PID 4688 wrote to memory of 5796	4688	msedge.exe	97
PID 4688 wrote to memory of 5796	4688	msedge.exe	97
PID 4688 wrote to memory of 204	4688	msedge.exe	98
PID 4688 wrote to memory of 204	4688	msedge.exe	98
PID 4688 wrote to memory of 204	4688	msedge.exe	98
PID 4688 wrote to memory of 2800	4688	msedge.exe	100
PID 4688 wrote to memory of 2800	4688	msedge.exe	100
PID 4688 wrote to memory of 1980	4688	msedge.exe	101
PID 4688 wrote to memory of 1980	4688	msedge.exe	101
PID 4688 wrote to memory of 1980	4688	msedge.exe	101
PID 4688 wrote to memory of 5976	4688	msedge.exe	102
PID 4688 wrote to memory of 5976	4688	msedge.exe	102
PID 4688 wrote to memory of 2636	4688	msedge.exe	103
PID 4688 wrote to memory of 2636	4688	msedge.exe	103
PID 4688 wrote to memory of 1708	4688	msedge.exe	105
PID 4688 wrote to memory of 2892	4688	msedge.exe	106
PID 4688 wrote to memory of 2892	4688	msedge.exe	106
PID 4688 wrote to memory of 1948	4688	msedge.exe	107
PID 4688 wrote to memory of 1948	4688	msedge.exe	107
PID 4688 wrote to memory of 1948	4688	msedge.exe	107
PID 4688 wrote to memory of 4560	4688	msedge.exe	108
PID 4688 wrote to memory of 4560	4688	msedge.exe	108
PID 3096 wrote to memory of 4656	3096	MC-Cheats.exe	111
PID 4688 wrote to memory of 2812	4688	msedge.exe	112
PID 4688 wrote to memory of 2812	4688	msedge.exe	112
PID 4688 wrote to memory of 2812	4688	msedge.exe	112
PID 3096 wrote to memory of 4936	3096	MC-Cheats.exe	113
PID 4688 wrote to memory of 4120	4688	msedge.exe	114
PID 4688 wrote to memory of 4120	4688	msedge.exe	114
PID 4688 wrote to memory of 4120	4688	msedge.exe	114
PID 4688 wrote to memory of 5412	4688	msedge.exe	115
PID 4688 wrote to memory of 5412	4688	msedge.exe	115
PID 4688 wrote to memory of 5412	4688	msedge.exe	115
PID 3096 wrote to memory of 1780	3096	MC-Cheats.exe	116
PID 4688 wrote to memory of 580	4688	msedge.exe	117
PID 4688 wrote to memory of 580	4688	msedge.exe	117
PID 4688 wrote to memory of 580	4688	msedge.exe	117
PID 4688 wrote to memory of 3744	4688	msedge.exe	118
PID 4688 wrote to memory of 3744	4688	msedge.exe	118
PID 4688 wrote to memory of 3744	4688	msedge.exe	118
PID 3096 wrote to memory of 6116	3096	MC-Cheats.exe	120
PID 4688 wrote to memory of 4848	4688	msedge.exe	121
PID 4688 wrote to memory of 4848	4688	msedge.exe	121
PID 4688 wrote to memory of 4848	4688	msedge.exe	121
PID 4688 wrote to memory of 1748	4688	msedge.exe	122
PID 4688 wrote to memory of 1748	4688	msedge.exe	122
PID 4688 wrote to memory of 1748	4688	msedge.exe	122
PID 4688 wrote to memory of 5316	4688	msedge.exe	123
PID 4688 wrote to memory of 5312	4688	msedge.exe	124

C:\Users\Admin\AppData\Local\Temp\autosoup\MC-Cheats.exe
"C:\Users\Admin\AppData\Local\Temp\autosoup\MC-Cheats.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x348,0x7ffdf071c188,0x7ffdf071c194,0x7ffdf071c1a0
    3⤵
    PID:4520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1968,i,1978418296146614255,14494604480974854157,262144 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:2
    3⤵
    PID:1800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,7069169041376902561,9029996867239074775,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,16690896263298385723,2285460368836731701,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:13
    3⤵
    PID:4352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,2892630303117136986,9098239051008933874,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
    3⤵
    PID:2460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,10698095190821410342,5046283146888626093,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
    3⤵
    PID:3336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,15480039292074068766,4686546151856736619,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
    3⤵
    PID:5796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,2768276409965678931,3015974035900283730,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:9
    3⤵
    PID:204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,14395854135086829604,1558863926082845086,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
    3⤵
    PID:2800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5496,i,8131647036099809448,1728190064688667699,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:1
    3⤵
    PID:1980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,14326451573122052001,11098379039154527775,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:14
    3⤵
    PID:5976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,11227707893955331762,7076106988847839588,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:14
    3⤵
    PID:2636
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,9416325723029213862,17338210262699808568,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
    3⤵
    PID:2856
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,9416325723029213862,17338210262699808568,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
    3⤵
    PID:1708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,11015389581416658476,12232944899830562665,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
    3⤵
    PID:2892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6572,i,14040211478995971100,15204933109759658273,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:1
    3⤵
    PID:1948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,11357774697578523624,13664564414770586244,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:14
    3⤵
    PID:4560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6988,i,869695682616509937,13137675363704544942,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
    3⤵
    PID:2812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6216,i,14599061139336809487,16812595488629799954,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7352 /prefetch:1
    3⤵
    PID:4120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7532,i,13500371025949222757,2049130288726333742,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
    3⤵
    PID:5412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7696,i,2572364668694549410,18130064838796478299,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
    3⤵
    PID:580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7824,i,2347829178436858864,14898214961121695198,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7816 /prefetch:1
    3⤵
    PID:3744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7724,i,3976884445962886015,5905838285302579153,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7728 /prefetch:1
    3⤵
    PID:4848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7748,i,2656180103299849775,17773909064681365159,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:1
    3⤵
    PID:1748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,2194835171639960655,2055402603390835988,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:14
    3⤵
    PID:5316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7352,i,13652916337391825165,2311185058046674023,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:14
    3⤵
    PID:5312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6816,i,6810680682595117593,10337370780508527492,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:14
    3⤵
    PID:2548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6292,i,3131371730979725291,15803865080179026195,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7692 /prefetch:1
    3⤵
    PID:2576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=1284,i,5570033348141793227,3312532362973898161,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
    3⤵
    PID:1084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7964,i,3464626587357963469,8498663271236374342,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:1
    3⤵
    PID:1588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8116,i,9222293866409924085,15619848212619152534,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:1
    3⤵
    PID:1388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7996,i,14622901029869327229,6572609901628295794,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:1
    3⤵
    PID:4580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6536,i,17711943858190405582,9146453155733106304,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=1296 /prefetch:1
    3⤵
    PID:1132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=1404,i,2394733997114664452,13541276734153054848,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:1
    3⤵
    PID:1140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7972,i,2981188911575297224,2122471597932909268,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
    3⤵
    PID:2084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8032,i,17199572226065994469,5828322595613104941,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
    3⤵
    PID:1980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6952,i,16093870697277553000,6876248715607608866,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8124 /prefetch:1
    3⤵
    PID:1168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8428,i,12287132113703914170,13026815452600219616,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8440 /prefetch:14
    3⤵
    PID:1140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8600,i,11356948857519450014,11869763013922795665,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8620 /prefetch:1
    3⤵
    PID:3052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8644,i,7087872627342905667,4636446200935288266,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8232 /prefetch:1
    3⤵
    PID:6216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7708,i,13669954515488142602,1331347400112462380,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:1
    3⤵
    PID:6452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8740,i,5616293832940059756,6126162148042449556,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8788 /prefetch:1
    3⤵
    PID:6736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8852,i,556164134551159257,13437920465649477626,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8744 /prefetch:1
    3⤵
    PID:6900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9024,i,14490226115784530383,15006009394376420044,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8988 /prefetch:1
    3⤵
    PID:3216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9004,i,4203685567374040041,5401093830151782968,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8852 /prefetch:1
    3⤵
    PID:6180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9172,i,4232963921672921501,13502121302430227650,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9180 /prefetch:1
    3⤵
    PID:6544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9132,i,4144597438419187965,14928723626134006805,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:1
    3⤵
    PID:6856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7412,i,514304853503098437,14930018912741777713,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8744 /prefetch:1
    3⤵
    PID:7032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7248,i,7792272707198983819,7270497792716492307,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8948 /prefetch:1
    3⤵
    PID:6208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9624,i,13509849239074314332,9442669738037398634,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
    3⤵
    PID:6316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9616,i,16279077123802904301,12706759511343154875,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=8840 /prefetch:1
    3⤵
    PID:6180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8948,i,1228111835101789101,6046240503922830989,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9692 /prefetch:1
    3⤵
    PID:7044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9748,i,4547891399588280921,14319545597158689807,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9732 /prefetch:1
    3⤵
    PID:6460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8748,i,1691700786693295625,13925143343519774528,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
    3⤵
    PID:2012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9604,i,4927407264002162203,14418656364129254666,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9740 /prefetch:1
    3⤵
    PID:6192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9360,i,6553666904107074539,1681127840587575367,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9348 /prefetch:1
    3⤵
    PID:7100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10076,i,11137501491901242735,14354997499085362128,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=10068 /prefetch:1
    3⤵
    PID:200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=10184,i,7527484730770446364,5392242676153574066,262144 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=10176 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10008,i,3560987697245476556,14565328479487810325,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9580 /prefetch:1
    3⤵
    PID:1652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10204,i,3962092473239972421,1852452292118572214,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9348 /prefetch:1
    3⤵
    PID:2436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9752,i,16222240618537322779,8557116741388259312,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=10160 /prefetch:1
    3⤵
    PID:3944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=6340,i,5886985179734601943,14124145559628148818,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=9540 /prefetch:1
    3⤵
    PID:1380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=7500,i,16099273245514352787,16560358845364034178,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:1
    3⤵
    PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10424,i,4017072009032158614,4899711605498931686,2097152 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:1
    3⤵
    PID:5884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,16613791481417014368,3651195649144205511,524288 --field-trial-handle=2440,i,9654125037923167090,4285029806114448582,262144 --variations-seed-version --mojo-platform-channel-handle=10568 /prefetch:14
    3⤵
    PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:6440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:6884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:6744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:7040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:6592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:7116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/ib99A2IA9Ip8yNr
  2⤵
  PID:6896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2680

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 55KB
SHA256 78cb9c24707b000d03553ef827d8cab2af71ce64e3d2826141e5d455698185cd
MD5 601c2217df7b949a3105381bbe379124
SHA1 5cb17607c6fe61556ab063219f7873057282a497
SHA512 1d249638bff1c34070d92bc674253ff84648892a660e693f4e86314129cc1a5494d9915e840062e2738ef8de59e95b7928f1ac5a09b7e438810666ef0adbc612
SSDEEP 1536:QbKR6Xj1HUqexajO6EDLUSJ1QnIGpNsMC:v01cxajO6iVunIG/sMC
TLSH
T105430271298FF4055931D6E67C01A93DEC89CCAB32B605AA9BD34AB711306FC243B17A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 21KB
SHA256 a20c7317c68e136b8fb60dc720307823ad49d5418d4710ea05a2137284580306
MD5 1dceec81146ba156dc8c0f4c15d051b7
SHA1 ba4b8c8c9b771f528ee6964dc77e942a8ececbd2
SHA512 4821b474968f0660b3cc2b2c02d758839ce58928577157a1dc62c0f2edeaf13d0c25443dcc75dcbf92836e95d870d33778dfb008722bf585598fd00110c9b85f
SSDEEP 384:RPniwNLvobQ6TzYK62vGm9VntEr+CYnsbb2EhYSPfBabpInwy:Gk6TzYKf1tbFW2EhYSxaVawy
TLSH
T14BA2E065B32173D0ACB973931AE72150FA0E6DBF1400CFAE47E3F69499FD1626428E19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 158KB
SHA256 b1e6bf57910642bc6c889ea5e25faec05fe9be6107e4a6cef0d21fefa7f07d98
MD5 7f425b16854487d2f3d0d75e80d72f6c
SHA1 7ea2a9fe36adab8c7358f5bce26f17bb2fa5d368
SHA512 b8f87bc12e3b76e624894cef93e3202ded97850a26a8b3c2a8c41050d016a9b1bf2327c234082fb7dbb6f6e25ff645132a0742e879bb30f4cc86a650bd3d109c
SSDEEP 3072:yw8HT14N5lhDlFHTBl+a44lLS3DGmkez+L6A3rLkM8NxH:lDRDzBQ443Dyem1fU
TLSH
T171F312741D6EA45EE301BE29539B1EDC4F31A31137A0D624FC9D28F2668DCB982A45FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 42KB
SHA256 f0b38922fdf9c0ac73f78bf071a639d8c1cf7e81789a4545b00f2010cdd33197
MD5 def455c743bf7aa48b2f6a1aaeab36db
SHA1 b9f5549b1f61bcc7f477973bece15870cdeddb83
SHA512 a8b0adc7bc90a3131c102e3dd9d96a05f3acc713493393036697bf0d75baaa5d36b089a7f32d9ae8a9ca3a6d10df706263670598877c4b79c86cb6c197a53337
SSDEEP 768:MQh9TUW//tToxCEvat+59X5Pfnty4bB5b3FTyUynWM3VEfwVRKxY2penBVvk6KRm:Vh9p/t0tCtQz3Z15RLL8bWY2penrMnBG
TLSH
T1F313F169A80E2528F68E5B580130CD9F79B9D701F4E3352BE645ECB3B4AF07B84B05B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 30KB
SHA256 276b50639b3e8fbe4b4459513ecb68ab82973b84d49b6db67b4688df36ca559c
MD5 8662c673de81c12dca4d43967e6ea48d
SHA1 d51f4e8cbd8a05224bbd685d29adcd3b5d59821f
SHA512 db80523abc5e9a908905f2d74b4f954047ea17966744ca46de9a798b585e7c36f4e53465e302cadedf1005a53d97bc261ee0c48faf338e46acf7cb5c4b5725c5
SSDEEP 768:LsAmJTKwYe553dX668JDy6CngqNLTLuoO5hB25FwW:uJWwx5j66gD7CnXNA+
TLSH
T1A8D2012A13F4D64487945E723A3ED3100CC21FC79DF2E1518D91E1B0B1FDC2A1AA39A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 22KB
SHA256 d30e9262d7e349219dffd4dd102bf90643c4a824ae047c8c5dd9c18bb25c067a
MD5 3c42da6dd93995be519eebc3c422ccfd
SHA1 4254d474a52da03af735c3cfef6009d3a5be73fe
SHA512 7e362ac888fdead65345c46ac4f60b127cf276a4263ccc1d6795bf29c72b6c9a80666b53eaf33061cc933fbc621d869d2d4b7550acc898c6daa7755b06774449
SSDEEP 384:uB1tzUHYlOX1Ygc9WrCZMmbrhINughJLUkpU9XHriwoZIwmDaS8K/QOf9dS:2zIYlq0q8NnhI9nUywoZI0S8K/QOldS
TLSH
T152A2E115876F7B7779BA5B128F138FF65E50DA2DE04DA4785CD580A33710380CB2AD89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 165KB
SHA256 ed0e758fc042ca929f65a44d56bc6a91b324340c6ea415283599f101785d85d8
MD5 b07ea94d372c03ad5e1bbf96f71dda7d
SHA1 ddcd663b1113a441cc7b56e17a1d523023952b99
SHA512 c2e9a767adfef9453e67185d05aedd9d68f4628f97266a148bb9eeb8da3e1b5fbaf99a53fa393205b6ebe415eff57597086e96c3b0470779c4cc1d87720f434c
SSDEEP 3072:7o1kFBpCXCCloeYe/Mkwa2EoxfEygLHG2DO7a6KH8BOFN1H:7oWngCCloXe/MA2Eoxf273MlBOFrH
TLSH
T1ABF3229E3FE04FF954E5F59E325824AE4B893C684215C4D835C5F8BCB63E9065A0B2F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 47KB
SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
MD5 260c81a4759baf163c025001c4f27872
SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
TLSH
T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 21KB
SHA256 485b19a448838d7e03c61e8d6d7f7f20c9f7f234d87ae12811441ed648ca2b11
MD5 7321fa7278264b45ef2351b1adb19ef6
SHA1 df47f2b3bcbe09d1443308522699a1c890269846
SHA512 f704ed4a10f62af659e177a2babd1d32f562fdb05d169b54af9a321cde6b84c0c0005e3c79a3766201efa3644a2c3ddc54bd6591b526c07deb1cadd57bd854e2
SSDEEP 384:D4eM/XmoXDFDt1xoDi3uqD4Uylqz9Jrrh8uYDJlxJaA9zxjWdJdfpFfIXL4C:D4e5ozFDDaDi3Ed0JyzlSA9zxjWdJ/FY
TLSH
T15FA2E0AE2955BACA381031F527F69C3C30449133215559333923FF8EDB38DAA654D63A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ed7d01881324489_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ed7d01881324489_0
Size 308B
SHA256 bdb33220c33bad0e7d0ef847faaca47728d4053de2709d9df7e02bda8111d141
MD5 3a2731602413dc97a62dd49cb871432e
SHA1 c43c2cd61b55d5eb8690901d5b63a989c80d7a24
SHA512 dd06784587b41608a786586d05875f76bcc5de543395a2784f5ab46d34f13ee6aae6eaa8465af473fc5c8ec017df98e64bd6474d3affd3d11f3f9458dff2301f
TLSH
T113E07DE309885283E56A62F25BD991AA81224040056FD818302440732B015B476E4212
MD5 SHA1 SHA512 TLSH

Submit Download

2869553022642664_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2869553022642664_0
Size 258B
SHA256 d01393da3df13c3384093a59f3a02e7fea8a31a7fc608e485c47af78bcc003ab
MD5 b865ea2853cdaf3aa36bf703069b48a2
SHA1 5ac89b27b5454cdf6b741f61f4f2272b8ed5347d
SHA512 510930f9bf0d157eef0a493115a5f9d0649aa3112073da480ccfe4999c02a9d65168e480c864e4c8d3552da3e260e1ff8e95dcaad5a76e159fe593f92069187b
TLSH
T1E7D0978B4581100AF79FD2F2C6727B9AC3B24038069DC300800ED0D34A9B2B093DD0ED
MD5 SHA1 SHA512 TLSH

Submit Download

32b9f23b7d6685b8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32b9f23b7d6685b8_0
Size 58KB
SHA256 8a7e5df35b373d0ac8d693511f2a481ecd6b15a4cc3870e42f7a68a115e30761
MD5 83d7ece520cba25772d2b8f5df3a4fa9
SHA1 5ba9b06024938054cf99797349b20cec885d9dda
SHA512 ceab5d28e5997fc9b30b8ab7be8059c90e0cd962c1e6ee3a870a9fab9e1cd228fe07bad83410c30072040b3d36a92b78c51965793617bd5cf2320ab279ecb930
SSDEEP 768:Q+sWpwKSHCHhPif2KVPgLemD1g6NBzN4AV1YV8tEwqFU4ba5aV0H2+G6eGmWA:ds0wKSGhw2ZT1g6NXDbCa4bh0HY1D
TLSH
T1D04308CFB1D2A33198E361F2451F5549A27E75160C94282FB969B7F42A3188F903EF2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32c0e06ac98ea6b2_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32c0e06ac98ea6b2_0
Size 724KB
SHA256 3b3cd7a902289f782d895c2e059090fd19a97388f4cd8a9fff6a8967b35f77f2
MD5 8945a24a87943741f08b192082dc4bdb
SHA1 57e283ece300041274e9fd2c2c42b24545acfb21
SHA512 e144b77abc86a5d83e28ba22066a85326d4ed5affc89a5bcf2192baf92a345c48635e71f3ad978d3b8338622426e16f429c5fb34c06357e20a90a7f9e86f79e5
SSDEEP 12288:wt02rtntFFWDcCB53iPbfJnp7BvzDXIzZJ6kR/Hq7HDD17D7Dz/LD57pD7lZ/dPz:wt02rtntFFWDcCB53iPbfJnp7BvzDXIO
TLSH
T18BF40662D785BE6DCA2552F049A29D62F57910DE2D82B64333E4DB383CC81D44FA7C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f35b69abfa65bb3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4f35b69abfa65bb3_0
Size 265B
SHA256 58656b3cb6ed2f3a44822b1908d79996557c7ce476ee5f649e2ebccd5f39763c
MD5 a3a6f24c9a45a8a1227d32f6a1666b28
SHA1 80af208feca4a59ec79f7ece3ba2aee4f88145c7
SHA512 65c3697cc6f2d92d2124171e5b354ab2ba152a5eb5ae6c95f23b45fe3b5f185f77fabf77803d96aab9476dd49cc6849813ea1713e19d3bfcb6ec9810ee9f4dbb
TLSH
T1A3D02BDB061C0919F5AE04F0CBA650C7C1A1D5900A288115A900D9635D61FB04A81211
MD5 SHA1 SHA512 TLSH

Submit Download

520669ea2a70f53b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\520669ea2a70f53b_0
Size 62KB
SHA256 8b7c6c065ee495fe9adf7d9e1e4569ba611350653a9385efc3547602fd6de7cd
MD5 1110852f5c78b23d9905862a97a9572f
SHA1 554fd399505c13f1cd8915db75b22128b0eb9ad4
SHA512 6a4e5fd962206d5ccc335db1ed594809d1b7d7370ce93e7a56dc8c85d4e7d159a633b6b107eabbaf285a4ad21cd49dc5614a820cd7d81a1bddca7df9cf5099ac
SSDEEP 768:64KuyfnGfP6XKZbluJmm55rpt8ItfU+uUopNtm1TULUomG65xW3J1XUazFU/1lfe:64daGlZblarHfe4dGIxiZVcZn4
TLSH
T12453A2152B44ADA9CE3A67F142628B23733185443EC3E72772F8B3352C186D95F9998B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52e96c0480ec0c7d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\52e96c0480ec0c7d_0
Size 36KB
SHA256 f26da62dad9e7f4d34b1a071a737fc3a8eac76c31347b200fd6c26a744658e3b
MD5 4f3819b6ace0869aaf894aac73fda5cb
SHA1 da0d64ab020289ce708b6fdcb67e95429ad819d0
SHA512 e3a0a5a6596101f5b9e741c26530e9a50343edd0031dd9f8808bcbc23fc460d2e4d244cee04256e8c2e37b9f75a80555a35a893ac9de36167f5e0ae7751c8501
SSDEEP 768:FMlbldS6j49N7ZbaUj6XMVAZ4k3K/J/9yHta+9p:sijnk6q9
TLSH
T134F2A4422B91EA95CB3613F101628966BF3645483FC3932325E4B7365C263E7AD1DC6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5544cb8c51e76564_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5544cb8c51e76564_0
Size 2KB
SHA256 b52b8a2ada0c9743b5d644a0188a31fed22f96c9d5c0ec4b9b388a6ddeeb85d2
MD5 9ccef56c9d1e602b383a0fee35fadd43
SHA1 789d52ed5edaccd9bf4bd81f33f9ed041fc51e44
SHA512 e3437ec221072baa34a4a8fbe2c8593afbb4b808b93aa973639910ae543f966bb9e934ae00798628ef19960c9452a25914eac8faa6d2d3e9759fa497f4087de6
TLSH
T1EE518323DF189580CA5536F675A5C3235B33C01CEFABC72B3266A2699C252D02FC508B
MD5 SHA1 SHA512 TLSH

Submit Download

70896ef5f7627a89_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70896ef5f7627a89_0
Size 244B
SHA256 64f72d056096f1c2a2a73880203448ce47a8106ea6e7db9fb6f47499013d49bc
MD5 c21b3df85057df2e5752aca83df61791
SHA1 1cd1266888eab619c661f28c5a7c45b46c4faa45
SHA512 01b3cfc23b1cd26f92afde3d0ae5c25bd884e9411cadd907b4fba8bce784f7cb9fb0ac27c83c92490841bc8d004597a02e417c4cc47730276af547a0570421ab
TLSH
T183D023D31C1044B6DCF60DF5CD3611C1053B40D10E98C0D60090C0B3BE12D30B380C72
MD5 SHA1 SHA512 TLSH

Submit Download

7455d34752d5950b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7455d34752d5950b_0
Size 705KB
SHA256 dcf4cff5e39522f898045ff11f2bacde3a7c1042a1a99f80b52bf6ab74076468
MD5 0d61b9bd40b4d87fcadd7a30f31b0609
SHA1 0ee310383fe6400a5a623ea327dba42f04bd7f03
SHA512 b01b92838880f4f70cbf02f7433ffd7b77308e287079cd3488fd9f94524ee8b67336cb92426233ca524c2a62a17aa72f07b03676ce27e80fc871a299bb5037c5
SSDEEP 12288:hzjv1Z7E2wHSI9FoCBQFCl2Q77kSlEKBBTGRmCMnz:h+yi7qEgQ
TLSH
T182E4B400DF81BF35CBB657B542D3D427753A415E2E93914353A0AA2A2C1E2EE6E97C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8de18f9190ddcf10_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8de18f9190ddcf10_0
Size 300B
SHA256 06842dd1b2ce37f691bd6bde661785be344e91c19749a80e7de21a04754d7958
MD5 0b159220f5a34f032dd4b877823f851d
SHA1 adf6dd3d13b424e11326ffb2a186296b07a6877c
SHA512 b7900ce46c18ab8625e87642d0335906ad17babb7d33783ae5547e6559e92860c256a47fdaee7a0f1a1fb7bd3f60f8307c6fc3100e72d1614fa85f0ff56a2019
TLSH
T1E6E07DE3F4600910F83802F1B7299606933250A649DEE0A01005A8321625B519682090
MD5 SHA1 SHA512 TLSH

Submit Download

97f43f1ed5d4793f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\97f43f1ed5d4793f_0
Size 617KB
SHA256 c0c462e0f7e4563ffaee4465d0ab4fe02514d5caf9d20ce7274f815954170159
MD5 34b70bd91c3d0278171fd8a9b9bcc2c2
SHA1 f72a64518f983a3834494c8900279d45aca70c33
SHA512 36bf2931700ca19eb400263d45b46a2bcc54044661b6a37477ff99e7feaf57a91b4a7c5bf97dd452144640221a429e13d99d681c3efd3a9fef0caa2410e1afac
SSDEEP 12288:C/Z9dg9a4E8wprymNLnyIL98SJoUaBdEB2kFxTpBSw:C/boE8QXOnUEiFdpZ
TLSH
T1A3D4A5C5D3C4FF99CB2663FD0652DA673230449E2EC3E32762E4EB282C561E94D49D4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac220693be138559_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac220693be138559_0
Size 47KB
SHA256 d67cccea49e229f4d873f80e5d3bdd69a6ff70c5423d64ab4851ec2986af9e38
MD5 b5c5855eacd527a0b175f533e364cefa
SHA1 63be2fbf2f661a4163c76733bbc92bc7647d3c41
SHA512 f4a8d4884f4a62e3d724d47da1cf0693c65ebe2747f75634e56a3173dcaafa61afe4e6350e4d52eecd7ebfa23a4560092f514880830e277104f68286406444da
SSDEEP 768:PpEmMEDPbe1YFQBUmrSALlrA20c9/NzJe9CEHE+f9Hp2x:REyS16QBU/srn0Kz4cOEkH0x
TLSH
T109239419A3A198D6CE3733FC41F68BAA6371955E2AC7D70771EA933A3C010D85ED281D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b12d85975979458c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b12d85975979458c_0
Size 263B
SHA256 1d8900c4ed2c178f8386e43902b1d00fb2698b3ddc0958434e68faa09fff7d8b
MD5 93cf8739f5fd530b5255577484647ef2
SHA1 6a530844c2bf3d86f0793468e4f3d14cbbaf7e05
SHA512 7ae90fed9717e87f266fbf88ae28a21e340d4eea6f6525147e3324d310a6cb322c4fe3cc4f84fd2e700dd7b3f7410e04c22765826587a7704e4731795f10800f
TLSH
T101D0979383304001E43AC8F2E6B6920F4B7B20A84AEEA2C21000D83348424B39068052
MD5 SHA1 SHA512 TLSH

Submit Download

b39b63ee0442f35b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b39b63ee0442f35b_0
Size 281B
SHA256 b1d98ce2fa141203fd347a00f20539f956aacd337a9873d078945d1f17a20e6a
MD5 788c1173d3add5955675482907b71031
SHA1 f880cd95a5a856dbc7d2f905f3ad3e0810df34a4
SHA512 36aadb512de02ffd580362cc33e32310dac7392bfd752ba3d2f4a06460905b203c8e9c0711c40549db5bfd6764437e5db83a91da3073096d765c4dfdbd738ac7
TLSH
T169D02BABCF98390CD36D54FDB7AF9DC1C962502845C4C118A205D2435F34DA55992410
MD5 SHA1 SHA512 TLSH

Submit Download

bd553e6a16228036_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bd553e6a16228036_0
Size 268B
SHA256 bfddccfcf50b912b25214a4f55f5f99d03cd5cd57a0cc5446c679086bfe9ad53
MD5 02ded38701e6849a9e615cf8dd19488b
SHA1 5e5682f5e105c496c9bb333fbaeae5df57c1626d
SHA512 bb12510499c6add7d6d91712088ef5cc24710921453fd38d0813b355db81fbbec6437326714e73d3f8bdaee6df93db82e11fe25ad34c5a08552606e95d82651f
TLSH
T175D02B57051C2494EA5806F1D9ED58DBC27256B90B8E40655001A063ADB155021AC404
MD5 SHA1 SHA512 TLSH

Submit Download

d731277f5ce04520_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d731277f5ce04520_0
Size 108KB
SHA256 271a28a1065fa6328d75f21707214b4d0621f4d0113b00d20b1123acde61d7fc
MD5 e94cbe78f336ec2bacc3a9cfc6a49f31
SHA1 955101fde1a925da420222fe6ce7eba366242c3c
SHA512 053a120311135a27fa34214d50fe290635d8da41fbd8ed192d0e4f9196a0143970154e41557724f92e7b796d6104aba058c4ee96d68136889357c3d40fcec0e1
SSDEEP 1536:EXR5ZjP+w+gA934eZWXR8mPDsgzW5/C3UDcgu0BzDVl25z:+V+w+gA93TSDS+nD95z
TLSH
T19BB3D7751B60AD95CA3657F151638C27B73348087FC3A72FA2A4A2362C4D6D90F5B88F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8c39e4582b150ad_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d8c39e4582b150ad_0
Size 51KB
SHA256 c3603b4719ac2d19ea5ef8219bab49084da45cee33ab116bda6a87ad1e7f3a18
MD5 fea559e3a3ed213be137fdb2a03582a3
SHA1 885eca62f9bdea4527c69e71346b9adcb5c7faf0
SHA512 d0a13a3033b492840de2bd73f0c19ca68552c273e314b02762279118bd94ad3123b5eae56e81761d46038486c176a6546e3d608de048e1df6694813c0e725a3f
SSDEEP 768:8Clohf1uxsIOkmwCUodNU/OsGBOJlaecJ560GagSrGXsxGGHo2PI0:BO+BOLdNUfllTcJ5Cl8x/
TLSH
T1E033F7265F90885ACB3707F581E78913B33542823FD3CB1732E4B2365E567D54E9AA0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db1b718d80db835b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db1b718d80db835b_0
Size 291B
SHA256 8a3871ae73334326e9cced5f6af131bdd22edee6178dd379d2bcb1841bc45d46
MD5 6e11a24d8062f3d45d87e50228da8f9a
SHA1 629b6ebdf0730cf4187aa5def7df84b3d74f3ad8
SHA512 e96def7b42b24f2be26d0e9409f0c675e372d86b61343e60f789b802c2ce97f619668b8539bb2c439abf0ff685c7013ef8173b3105da2b170e85e486967d2ce3
TLSH
T163D02BA37575C414CC6886F1EFBFA284D632A029BA6881E511A290F35990532744264C
MD5 SHA1 SHA512 TLSH

Submit Download

e72761dced4c67d6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e72761dced4c67d6_0
Size 259KB
SHA256 c7ecea0d17bf38a313ed08d2cab08ae6dcbc1749b8c35d416673fe6bbc4952cc
MD5 433029d70769e392ea89575b1e3d2d06
SHA1 2537df0fae5a688285b0ddef16be404d5ed039de
SHA512 5b872338b3df022f96e4c7f28aebf73ea37bea43831a4e43f1f81b240c2145140d1ccc551267f763ae5dcc59a193dbb283ce63a749dbc2c11535890ab47ea7bc
SSDEEP 6144:r8Cnxz6O9q8rpiImY6d51Jaty7Of/cE1b1V8pUvhsqM7WI2VyKynevnQ0eZvDEUC:VxzejzQBzCa
TLSH
T16144B7856385BEAACF22A7FD05628A277235445F3FC3D33712D0FB252C562EA4D49C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec9c25db25c92942_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ec9c25db25c92942_0
Size 305B
SHA256 b956fe04c5c1b35ab68d3291119480f4faf43b75292f0b6de4c662ac61c80ec3
MD5 f99c2d381295b2735ba341779799cfa4
SHA1 09cdfbeae251e98748e0a29abb4a45a1f90f6690
SHA512 9ecd75c9d329613e61ee2077fe2522315842e9f34173cc08a9e7a6ce110b9652cd469c7d813cad5fb825ac3b1288545b7d7cd91e06809ce81262872b74bc2bdf
TLSH
T1EBE0EBF3B8801492CB979BF08E566E18C33380A408ACC0A1024091E93F110B0D6D16E2
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 77021557ad3981c7c4a4eae3d8f4c58379e5e8f44e5819ef882e422f644838eb
MD5 13e4c4c7326b1191ad8f146966a45b66
SHA1 8566993fd091bb8b7d3fdd59e9e4085cdfc584fb
SHA512 394f9cb08e4cc2f26bf8bfd9e8a960cdbfd61f0751bffbb4d995047a01c65bf40447f9b8fa283b489f211620fe715cf4193090a20fe349722c363705bc414699
SSDEEP 192:D/SZJCbJiJZJeIaVacrWtYiz6R0kFKvEj/fGPHDfjPqpPl:D/SHCNiJZJeIaVacrOYiz6R0kFKvK3Ga
TLSH
T162D17DF7C3E8C56ECC1356F06B24AE2ACE2D091942683C1AC9D49F5BD3E1470E141A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 bb63f4dffcb6ce60366837433230a4ddafe2693f4da370a2d5b7795b8139645a
MD5 77bac10b4379919a74f0e0bada641a9b
SHA1 bf63f9193ce1b785d94237e0649370b31a0cde0e
SHA512 cf21ce7899b455de199d3a426762efe17e4c7531fa1a6cab84e239e21a4bcb4e5e7947f1e5cec1d82eb9cf799f332d8032587af21b14a2e6a47c5ee8c9ddd378
SSDEEP 192:sxR6R+pCv/frsiWElYSZubzoA8pRwG/g6+WNIh+faty/uE3a3pGQPIgVBJ:sxR6Vv/frsiFlY0XR7/5zf4LV
TLSH
T16242A7166D28A93B5CCBE219FB55BF53D6F91032A1D05E48BAFC8A1C04EB6DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cdf61bf9e2974c0544fe72708894c802d2f912264193d41608f04b08f4903b97
MD5 5842a6ab9243316f45f4b76924135f13
SHA1 4631f8815aa7ae949fa87c6785fd6064542b6639
SHA512 5270103d0f712c892f534dd45b956c51a2fe5c40538037a19b573bc1158b8ae7c430fe7f98eb209bc58eb33ac61a2048197a473ad65a4652c8b8c2c417d4faa1
SSDEEP 192:sxRdR+pCv/frsjWElzSZu/zoA8pRwW/g6+WNI8DpatYpPEos3pGQPIgD0BJ:sxRdVv/frsjFlz07Rz/5TpeLO
TLSH
T16042C8166E28597B6CCBE219FB55BF53D7F92032A1901E48BBFC8A1C04EB6DD610740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 101f119295ed23c011800ff3f0326be7baf6b13b3ebf476f3a49896a8828c83b
MD5 2b5a0b471e9029c9bb0ae4e92d2ff403
SHA1 6c193ebcdb86c569ff86dd19e3118d497f3d424e
SHA512 151aeb156d3607e75e7f42dd4f5ff57317c9f726219b478d2273d7c247187970d21a812788cddd78a06d8b6f92a478e4f387f69efbfa82f4d1ff721e3f09d7f3
SSDEEP 192:sxRdR+pCv/frsjWElYSZuJzoA8pRwU/g6+WNIvHZat+kcMENa3pGQPIgDOBJ:sxRdVv/frsjFlY0BRt/5oZLWL8
TLSH
T1D042B716AD28993B5CCBE219FB55BF53D7F91032A1901E48BAFC8A1C04EB6DD610740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 17ad7520a8d80273aa41fc0d85c6ec8955338b61abb0c7acfa88c8007ebbe709
MD5 7dbb6be91e1f75e147b039c5440cf4a1
SHA1 cb4bbe950325dee072c32a53becfa1465f1d2733
SHA512 aaa1d64df3a60df00cf6a26cf9356ddffed3bd00bbaa49a4f068e9fb40bc529b7ea55581afbde092c8a966228fae15afc0f0b597860a96b51697ceacfba44946
SSDEEP 768:40Dk6DJQD8PF7pLuL7N0DbWgQ6DjfsQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OV40:40Dk6DJQD8PTE7N0DbWgQ6DjfsQDFu1t
TLSH
T147D2EB7B640DCB7F4F804ADDAC197A9E6DA802CB96D8C98047FE991C02C77EB51160DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

619a2fb7-958c-4557-9ead-8796abc0c5f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\619a2fb7-958c-4557-9ead-8796abc0c5f9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 061f96971c0c2bf51315205a8d33b87177f7a2a25a5f92d984651209fdcf16fb
MD5 102484611c42083879ba460f92cd1a60
SHA1 fc995161165b141514ea852be1268ac211198ce7
SHA512 165567e528a9acec5009a65c01a6c3cd167efcc1776d220b831f43ba971ffd0aa9301ad7124a80a4c70f5a51e5814f3b11fe5fe38a5579572943f77cf8a691a7
SSDEEP 768:prv+4UNbdG3bNoDTd+ZjeX6+qTko0u229a4vsD8eVH1SdW:pbsbU3vivVTVKa4dEH1h
TLSH
T11603CF33E8658A779CE79784714B75073EB96163C6D80B84D8ED6B0D068B5AC230BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 d63ea6d57cfc7c6e823df85eb1faf2f4072e9ed454c53dc319ee9154075a3ead
MD5 61c7a00081ffc5c6ecdd875cad5a5698
SHA1 683883680646f4d6cfba48fbe35874b174554d22
SHA512 fa7bb7c06ec04fc788ab3b5995d1bb548bb2e6d269e557fe861da4613dd9db90e13eaef785bcb702f954995a8cb511abb1e7924b002bd29d1f24c5eca3649581
SSDEEP 768:cX3ntsDTd+ZOeX6+qTko0u229a4vsTsPi9PGE:cX3bNvVTVKa4pP6
TLSH
T1ABF2BF71FC659D6358E6E784725722436EF931B3E6C81A08E9ECDB0D058376D1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b3fdbc8aacc97090ceda4ff2c60f92dfcf24540324913da09c08e38029c09e53
MD5 286c1a60076cdf9da21ed796eb5cb799
SHA1 7899c2e9d5e3338f159c416745b690533656e88d
SHA512 15008fd39d7ae73f3daa24df047911d410278630c48486d6268fb6e2510fcfc230d10ea3760f0323b0d979af16400b8d80b05084e35bf02089328314a6b4e439
SSDEEP 768:zX3IDcDTd+ZOeX6+qTko0u229a4vsTsPi9PGE:zX3GNvVTVKa4pP6
TLSH
T192F2CF71FC659D6358E6EB84725722436FF921B3E6C81A48A9DCDB0D018376D1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e822e7a865685eb0ab7055a267987e06a4edc34a0fbb9ad8144b3156d95bb0ca
MD5 1e7e19369cdb64c40fe5135e8e31dc60
SHA1 2adb8af9d41a4d05869c4bb59b5170149c642953
SHA512 e7c8537667c3fa18dfbbe2e418460e5ca2c916c90546dc90a5b141d3c4274d60683fa7c7915f7334b267f3915370dfc19b42142709d0fabb10589776f123934d
SSDEEP 768:PX3I2IDTd+ZOeX6+qTko0u229a4vsTsPi9PGE:PX3RNvVTVKa4pP6
TLSH
T11BF2CF71FC659D6358E6E784725722436EF921B3E6C81A08E9ECDB0D058376D1B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 aae55263114885e5d9631bea3760eba9cf7b2b23469c82aa544347de205d594f
MD5 47331d1d922610d9bdb71575e3adaca8
SHA1 c37211ceb363d0e7550d54c9f80409ccd85910e2
SHA512 c128b3947d52523d3d40ebbc70291285d0ebfd16b2de3204f548c5ac73b289622b977ca90315ad5481c54084fdea03d3ca8408592130a188f6bbcd7bb954bdf2
SSDEEP 768:Trv+4UNbdG3OECDTd+ZHeX6+qTko0u229a4vsSseVH1SdW:TbsbU3xWvVTVKa4aEH1h
TLSH
T1B903CF32E8798D3358E69784714B36473FB821B386880B44D8EDAF4D064769D274FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 968e4fe9a8c7c654ef3b77e3b7cfb5c1d6a98cda7789ae514e37f04384da0e9b
MD5 e265a75d3c2aa3e245c5ae14c97d07ca
SHA1 c8bad1214a1bf16fd49e7be771af30e3edd71dab
SHA512 9a042fc1999a08efb64ddfc44ae4c8a77bbb74d1e5bc9de633850d7d1a542bc2793cc170acdab184e42d361c956b9b9d56a9900eba194b54ccc8359b8686a620
SSDEEP 768:jFQ73AwgS4nnZWeX6+qTko0u229a4vsTsPi9PGE:G73cFvVTVKa4pP6
TLSH
T1DA039E72EC64CE67ACE6DBC5B75636479EF521B3C6C859C8EADC9D08008329D170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

6e794d4c-000d-49c9-810a-ec3dbfacf66f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6e794d4c-000d-49c9-810a-ec3dbfacf66f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4688_1042261996\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download