b0eca83117bd48b6806c14ef650ce975a366fb5d22af3f6bf9b775c7bf83ffe2

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Size 4.2MB
Sample260817-2w2efa11cs
SHA256 b0eca83117bd48b6806c14ef650ce975a366fb5d22af3f6bf9b775c7bf83ffe2
MD5 037937409861aa949526c241c0ce1194
SHA1 c6135d5e53ceca6bd809dee99394a5b89b9404f7
SHA512 9861f7282503dfb9274e92dec4a5dc61ca289f9ce4cda88f840a04dc0941718c7889d737ccf64afa786814a87e1630d9f6682c9316c3d97cb6744149f583e121
SSDEEP 49152:5nN/F1jtGPD1yHLTSgkJF5LhQV+ajx+fYJbRcG2IERwUmG4P/h9ssEt:VHGPfgo59CfIfYxRcfOURmh98
TLSH
T11E169D12B910A03AE5D2C171B96E9BB24D6DDA3013B884D3DBC09DF895235D3B73E74A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 5 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4840_233948298\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4840_1151076622\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4840_1151076622\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4840_948389231\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4840_948389231\nav_config.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2460	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314810267710216"	msedge.exe

Modifies registry class 12 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\URL Protocol	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\DefaultIcon	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe,0"	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\shell\open\command	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\shell	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\ = "URL:beamng Protocol"	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\shell\open	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\beamng\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe\" -command \"%1\""	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{8B644FBF-219D-45DB-9F4F-2F6078F2F0D9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
176	msedge.exe
176	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1964 wrote to memory of 4840	1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	96
PID 4840 wrote to memory of 1288	4840	msedge.exe	97
PID 4840 wrote to memory of 2460	4840	msedge.exe	99
PID 4840 wrote to memory of 408	4840	msedge.exe	100
PID 4840 wrote to memory of 408	4840	msedge.exe	100
PID 4840 wrote to memory of 408	4840	msedge.exe	100
PID 4840 wrote to memory of 3592	4840	msedge.exe	101
PID 4840 wrote to memory of 3592	4840	msedge.exe	101
PID 4840 wrote to memory of 2604	4840	msedge.exe	102
PID 4840 wrote to memory of 3504	4840	msedge.exe	103
PID 4840 wrote to memory of 2604	4840	msedge.exe	102
PID 4840 wrote to memory of 2604	4840	msedge.exe	102
PID 4840 wrote to memory of 3504	4840	msedge.exe	103
PID 4840 wrote to memory of 3504	4840	msedge.exe	103
PID 4840 wrote to memory of 4580	4840	msedge.exe	104
PID 4840 wrote to memory of 2212	4840	msedge.exe	105
PID 4840 wrote to memory of 4580	4840	msedge.exe	104
PID 4840 wrote to memory of 4580	4840	msedge.exe	104
PID 4840 wrote to memory of 2212	4840	msedge.exe	105
PID 4840 wrote to memory of 2212	4840	msedge.exe	105
PID 4840 wrote to memory of 4408	4840	msedge.exe	108
PID 4840 wrote to memory of 4408	4840	msedge.exe	108
PID 4840 wrote to memory of 4496	4840	msedge.exe	115
PID 4840 wrote to memory of 4496	4840	msedge.exe	115
PID 4840 wrote to memory of 2532	4840	msedge.exe	111
PID 4840 wrote to memory of 2532	4840	msedge.exe	111
PID 4840 wrote to memory of 3256	4840	msedge.exe	112
PID 4840 wrote to memory of 3256	4840	msedge.exe	112
PID 4840 wrote to memory of 1720	4840	msedge.exe	114
PID 4840 wrote to memory of 4496	4840	msedge.exe	115
PID 4840 wrote to memory of 4496	4840	msedge.exe	115
PID 4840 wrote to memory of 4008	4840	msedge.exe	116
PID 4840 wrote to memory of 4008	4840	msedge.exe	116
PID 4840 wrote to memory of 416	4840	msedge.exe	117
PID 4840 wrote to memory of 416	4840	msedge.exe	117
PID 4840 wrote to memory of 4176	4840	msedge.exe	118
PID 4840 wrote to memory of 4176	4840	msedge.exe	118
PID 4840 wrote to memory of 3064	4840	msedge.exe	119
PID 4840 wrote to memory of 3064	4840	msedge.exe	119
PID 1964 wrote to memory of 2936	1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	120
PID 4840 wrote to memory of 1796	4840	msedge.exe	121
PID 4840 wrote to memory of 1796	4840	msedge.exe	121
PID 4840 wrote to memory of 1796	4840	msedge.exe	121
PID 1964 wrote to memory of 4632	1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	122
PID 4840 wrote to memory of 3600	4840	msedge.exe	123
PID 4840 wrote to memory of 3600	4840	msedge.exe	123
PID 4840 wrote to memory of 3600	4840	msedge.exe	123
PID 1964 wrote to memory of 1300	1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	127
PID 4840 wrote to memory of 2904	4840	msedge.exe	128
PID 4840 wrote to memory of 2904	4840	msedge.exe	128
PID 4840 wrote to memory of 2904	4840	msedge.exe	128
PID 1964 wrote to memory of 4364	1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	129
PID 4840 wrote to memory of 4408	4840	msedge.exe	130
PID 4840 wrote to memory of 4408	4840	msedge.exe	130
PID 4840 wrote to memory of 4408	4840	msedge.exe	130
PID 4840 wrote to memory of 4424	4840	msedge.exe	131
PID 4840 wrote to memory of 3640	4840	msedge.exe	132
PID 4840 wrote to memory of 460	4840	msedge.exe	133
PID 1964 wrote to memory of 3512	1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	134
PID 4840 wrote to memory of 2212	4840	msedge.exe	135
PID 4840 wrote to memory of 2212	4840	msedge.exe	135
PID 4840 wrote to memory of 2212	4840	msedge.exe	135
PID 1964 wrote to memory of 4400	1964	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	136
PID 4840 wrote to memory of 1304	4840	msedge.exe	137

C:\Users\Admin\AppData\Local\Temp\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7fff588dc188,0x7fff588dc194,0x7fff588dc1a0
    3⤵
    PID:1288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,10703731108794109450,13981759059620900071,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,17969716427084967248,3854576792270651284,262144 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
    3⤵
    PID:408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,4009788995081725235,14973065317011715832,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
    3⤵
    PID:3592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,12534523985584424689,12527925137374991172,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
    3⤵
    PID:2604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,15568996926306409487,16782964964015679042,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
    3⤵
    PID:3504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,11239310605489054344,8068179470289565097,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
    3⤵
    PID:4580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4156,i,8104577030891690007,8866125151894188593,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:2
    3⤵
    PID:2212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,1622023599556246355,120783773947201911,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:8
    3⤵
    PID:4408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,1648075487439627125,4637901101433111813,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
    3⤵
    PID:4496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,12418966963615978560,11218991495984254016,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
    3⤵
    PID:2532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,7008241139180458260,11347184720316134650,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
    3⤵
    PID:3256
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,798142730788767900,18437737483036018758,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
    3⤵
    PID:3116
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,798142730788767900,18437737483036018758,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
    3⤵
    PID:1720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,16525833815704475108,11947693177131278462,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
    3⤵
    PID:4496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,11504681659970716691,7942014772353529689,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
    3⤵
    PID:4008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,3175058180286985,9534788053246418463,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
    3⤵
    PID:416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,17823290661675880496,1909088011592928685,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
    3⤵
    PID:4176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,4084760672405462427,1627041897102847232,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:8
    3⤵
    PID:3064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6072,i,15246815315330114614,7517560544609436323,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:1
    3⤵
    PID:1796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6276,i,10237346810174455107,4931203262773476352,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
    3⤵
    PID:3600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6576,i,3803466812595989982,10234934872153108812,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
    3⤵
    PID:2904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6492,i,5783288698145679358,12391238589817116488,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:1
    3⤵
    PID:4408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,15186232940218871902,9236006389741791115,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
    3⤵
    PID:4424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,16325207129646426167,15029361475253074967,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:8
    3⤵
    PID:3640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,11606245391639589921,7185997200922112659,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:8
    3⤵
    PID:460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6816,i,5445341150934098489,14337131194414701888,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
    3⤵
    PID:2212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6912,i,6396499988720688007,781791044773312231,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
    3⤵
    PID:1304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5876,i,2653123455919582080,18114292736460684430,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
    3⤵
    PID:5340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7348,i,7913896780268771906,16313095018980130796,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
    3⤵
    PID:5700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7444,i,16583459964614907072,12285010755019222353,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=7456 /prefetch:1
    3⤵
    PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7764,i,5484795637000511087,7823856205334386886,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=7784 /prefetch:8
    3⤵
    PID:1848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7788,i,10213285579489297982,17505485551867113519,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=7936 /prefetch:1
    3⤵
    PID:5708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8116,i,3205736793813469826,12308283972356496552,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:1
    3⤵
    PID:2468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8292,i,3215561554315108931,3583572382644553283,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8276 /prefetch:8
    3⤵
    PID:5768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8228,i,8834972388368251768,17106253965105173308,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8384 /prefetch:1
    3⤵
    PID:5892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8500,i,9494539200400434423,14175719276494373726,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8496 /prefetch:1
    3⤵
    PID:3484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8560,i,15801973493246456526,5905186928834694236,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8616 /prefetch:1
    3⤵
    PID:656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8752,i,13990097954219904647,16794258558253698896,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8800 /prefetch:8
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8884,i,3239618420807941121,10790540658330972273,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8868 /prefetch:1
    3⤵
    PID:5880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8940,i,10491712987134020622,15287904897099863770,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=8992 /prefetch:1
    3⤵
    PID:5792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9168,i,1486794748079505467,6978986253658346625,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=9164 /prefetch:1
    3⤵
    PID:4616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9316,i,12219152607132965126,7583626208422406082,524288 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=9328 /prefetch:8
    3⤵
    PID:5788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9432,i,6109632814135670038,16863187964710284785,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=9444 /prefetch:1
    3⤵
    PID:1244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=9496,i,3744361015068570217,11680599703629946709,262144 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=5240,i,4527192137486784246,15030372287111587431,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=9492 /prefetch:1
    3⤵
    PID:1756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=9568,i,7636004443092164830,318019782630782365,2097152 --field-trial-handle=2300,i,11348412327328309168,2600811541324659895,262144 --variations-seed-version --mojo-platform-channel-handle=9556 /prefetch:1
    3⤵
    PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4840_1151076622\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4840_233948298\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4840_948389231\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

BeamNG.drive.ini

Path C:\Users\Admin\AppData\Local\BeamNG\BeamNG.drive.ini
Size 23B
SHA256 27f09fa704d0672b7fd624a5599b051a3596cf9467cd11a41c707f28d590ec08
MD5 120d791573593f3d5c33b05b6e9dce7c
SHA1 5db900ddb1f7046e8d6eb31cf229ebadf65bc355
SHA512 37d948dc718185d28459d57386f2cbd69f808c69f4f3061b50138412d015d4e0381b46177640194ad6a339502a5d3b79f5e0e5773af368837e99eed1bad6fa59
MD5 SHA1 SHA512

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 28KB
SHA256 fdb81c0dad4820b2868f9a139641f5a85af8b41f44a38812eea711b01d1460a0
MD5 7e796da1400cb2308a203d57d683191b
SHA1 b65db17d6c51191cbde873451445239afbf38e37
SHA512 5417658598909a81a06245519e35c9045d67582c15c6a8769d5181951eed04f48f20eb29b90ade702bbe86ec9b9a734db44f98b3ccf0e4402f8bb807e0a66c02
SSDEEP 768:KvLxFEOCk/YujmNqVNZXWBURcE/Tmuu+S:OLxR9YkmNqVNAU/rGr
TLSH
T19ED2E1F06F1061B3E4EF0C50A6D2F4D9B34A697A2459A68D8BD0F3881D59937E67C223
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 23KB
SHA256 b3ae20ce1d3bdee9a023049a234bfb3eca29ee5e7c4b95213d9b3669a1585f1f
MD5 2c74fc553d23c55bc53bfeb940d46c85
SHA1 cd0991882c121f20f98732c777f0f5fb3af82c09
SHA512 75540585da814a252817ce85db1038d5a02b60588401c0a52fda62e4df58cedc84c8d64a965b64444aafefb2f958e4c4060ea6e63d2a7e199cc806927950ce65
SSDEEP 384:pj7blKOR17gObAGHq2BNX4clxyxPMMy8KxTM6rviSU1n/7yDnG3IN8zAflalHLvt:pj7blpRdHXjXVaPMtTN5U1n/mDIIN80s
TLSH
T1D9B2F16E5A0EF581F758B862405EFB7A67017236A078739238729DF0735538107E272F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 27KB
SHA256 bb1f62c013378276c370767f64b199fd027957ae58fd15df838f2690223340fe
MD5 23c8713035f38780b48229d9b69a9ec1
SHA1 3c57c9d676c161c0fb10de52f789576c23544cae
SHA512 3a7716e71932f6e3fd5d691f30976fe2bdeed714874098e5f0477910d06fc52f58753262d398c2ecd94641c8364c3c5e7f8037683236dbb07e6dbcf469344579
SSDEEP 768:lM6rvn7xgeyeY4iHTNBItrfLHJRO16LR09iwa80MN4RZ7af0YDXHvcQ:+Q7xtiz+dRpaVYMN4+fbLPx
TLSH
T100C2E130D8F356C0F45B74A8D78E397E980B236EE5A63BD669B2374990945E7F0C1C42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 21KB
SHA256 6ab018b1645de31f927e53583009988d260a4a632f370e346874705da902834a
MD5 502eed3d97ae284012c071d58a4dbf6e
SHA1 8ad9e1009770384e4e0a012335b02b65caf9bf53
SHA512 19ebfef9424bb0446158bea08d13175829fd8a7af37ff60be16136fc33018b9d2e72a0566afb403f3b74c42abfe65dab893cdfaf58fdc57d5f41c8950b5b6661
SSDEEP 384:oIIrwChhhcEcBUt8szI2qOV00QNw4CjUUUXxEvhluuuu6Z4cEBWGLM8CO9rMKqzw:o5cBp2fl0ju4w+s
TLSH
T175A27C639E4CABD3452D88537C895EF8BA1C414C5CF6AEFD18520E947AD6BC37C0E14A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 85KB
SHA256 f8c1310c6b5351bef1ed7a6d0ff52aba46264a4c42f5346e1d0a1fe6e189e1c4
MD5 4dd8a4fcba34eb94ee58472f8e3e5312
SHA1 ed7f1fd4369906eb2f0b649a5025bb0a48903df4
SHA512 b1415e8d9b4ddd58954ec7984b7896e71f87207401962d3467472ff0ad541e5091d69592cc1700305d22e89bb8d43761d87954ba3e2f579275701f11b839632c
SSDEEP 1536:X4aVbD3cuTLui3M4xjY21BbqNNswyFpaoja/91nJSqeo6h6Xga0iOS8l47mI8Ov/:X7cuTSi8qDeNNswNobqe16Xlsb+Z8a
TLSH
T10A8312095F69762F81893F25F4BE31A756AD1D773BA9851428CE390854E0CA00FFB9B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 75KB
SHA256 6f67ab17872ad1359826c58feb2fbf2d8dfd65fe7bb6d3c65e7c1a1e6c97b92a
MD5 b60f99594bf03592c410d7105ca11f19
SHA1 ea242f9c7dd16afb11fb531aacdc59db27af3bd5
SHA512 e5f4c6f00b8ab5b52b2d690a5ec3eaca14b5f20bc4aa78a32efa09a53b0d5f386bec0363de5f6c1ceb71c4027580cc712a9a74877be941cc353b6ca4afa452b3
SSDEEP 1536:cB0HwaXfUlo4cdxHz9AMl15wS8H9VEzvDP5CYye9csjo0:PQ8746xTjNP5dyco0
TLSH
T10E73126C6F4C6EB33E649075AE197E242AC847310692DDADD8878A4F76247F05E7C2C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 78KB
SHA256 801dca2cd4dfe538081c3c2bdab598e22deaeb95ef7524cbfad7b6301dabfe21
MD5 c64b0197887dca77299832a8403f05c4
SHA1 8455f1d94666f72a642681f9c6b4c31b963f3ceb
SHA512 b71409176b377c98faf9c0292697571799181c5e5adf54dc430ddef3da4eb029ce7d06979e48a156ff71489e99b9dc66e55fee9bb17fe79c9d2b3152eec5a7d5
SSDEEP 1536:j6BWpH/r7w6pNJ/l6mX6MOqli+mKOQgQsUSb63WIuMHdpvDsv5WNgJB:GBA/GmqEc+kQOt63HzHvwv0WD
TLSH
T1177302196FD3E27372EBB6F0A629972C5F5D241E4306C68F44369361E13256CBA731C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 54KB
SHA256 0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7
MD5 a1ecc3b826d01251edddf29c3e4e1e97
SHA1 9394f35bd2addd24666b79bfc36d4f9d247cb01d
SHA512 2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a
SSDEEP 768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81
TLSH
T1244328747F6A5B2BDE839DB9FE850E5160F098C61F43F123C09E98522C7B7A88979143
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 78KB
SHA256 a7a235d31bf207fdb9ac7681b8dbb816546e091b9af6ccb704ce7ae9021295cf
MD5 4200eb680dee8475c1694d33dbd0909a
SHA1 a3071b501b478888fba5a8587c29afe3fa2a1d35
SHA512 79b57c69a66d49b9218486f8146fbc74b369977e44fe45aa9e9285a6cce1d47f36523a29dd6cee327813dc070ba4c25a72dc10720c7664405ade89cb9b0f385f
SSDEEP 1536:7EKFoGKUKHw5+ygzyYS75nukFMSQdkCFT4gaCDaTJm:7hFn9TYSVurh4bCkY
TLSH
T13073025CEF7ADC89F079097F85B6858FA1E118B41CB3994DD8B0E6805C6F5B088B4B6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 78KB
SHA256 82812a6cbec3d06385ecb2ce95bd21452a224fd0c6ac6daf34e54074b1aea38c
MD5 ec0c4bfd0cfd0c30637ccc25e6ae9bc1
SHA1 104f04cb488d53b837a35475830b900b69d47737
SHA512 9b52248f259e5147620fa03f3dbc491adfe7291f4baef5fa07accf2cb4016d6a2b8baa6f967542fa474e4be6eda87a57b7a2b6c73f755467878051e3c20eb5cf
SSDEEP 1536:SlXq62GdQNNDXlkuxnyMm1vmTTX+NkUhM8lvOrvpU3bz0:Yq62SQNh1krIONdC3vp7
TLSH
T12683029F51E3C0DBD1452B66CFC3E072528073A195EB48E77FD0A5621945F83AFC6886
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 77KB
SHA256 13ee4c21c4e09429fe2c14b9f96c5a7997e84b8914d9bcb8c9ab0581f002c2de
MD5 ccf584c510a241c0989fa0aabc2ae207
SHA1 85367a328277f12fd5e64bdc0b68d876c6dde42c
SHA512 35c89ab5e9c33bfd28b5c2275b5621bfe11b39185543248309b85af1d27fa556b063cc1a12bd27cea603909ab1a0d71b8e5e288634625093801fd005029bed0f
SSDEEP 1536:O5ZtYdhL6SZ5g+VxbL9KC5OXAiJMmnnyhsxjv92U4AE8wVwNYOR:1OSZ6+DbAuOX1JMq9xh/1DwVM
TLSH
T10B7302AB660601EFA227D874476B1B4F2B7CA3BE3FFAF51A9D5E0576013C480B44D069
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 78KB
SHA256 81366cba3d31ca34a30d7a03213637fc0d9e645f8b17685fd667f1be958c18bd
MD5 1080d50e2eba79e1a90c05d6f0443636
SHA1 b151e8fd9afef1cded3254322228aede872536c9
SHA512 3914726c3c4095a8fee06492a25c7a4f96712e309284236b7fa81bf221de8daf4578f71747d289c13823cdb81b163b2cb8300e36b7bcaded1cae0f209800ef2f
SSDEEP 1536:24xtQ+6qXexzJZRC/IIg5TEgHbAFhwkKJWHlARjIHkVdwxbxopls9y:iIezPcIIgwg0FikJHUR6x+co
TLSH
T1DD7302C968C36EA9E0F53BFCA7C14E5D659E366D034A8159CFF787C9E12510A0393B0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 33KB
SHA256 14da6c83192a48d068990786b96dea7503bf01f42b1b07e6d8d10fc2458cb771
MD5 3f9b59d718cdc1ae5981f809a6d1d1aa
SHA1 ca68c1bf5b4aa471ef21b6ca7ef813dded8e077d
SHA512 fc99d325bed1e3d0c477f7330e8325708d0d4d614c4f5873208fff79d75ad5e788f55d20d5555b8fe74bf5fe5738f5f642e0aecfaa7a167f49e10ffcc3b70c4e
SSDEEP 768:UUexKDAEbdIXB7uaRBZh2w9QsBlQ94brXFQFD1T:UUexPEbd8UwysBRFQDZ
TLSH
T101F202ABCADC7638CDC1D86C78F8595A549B5118CB4DE502EAE9F75C30F4B23A1C384A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 18KB
SHA256 89b5dbede3553cfad9450ab92d2d653c8772d2d47649b836b5eebdb49c81c4a7
MD5 04ee138f1da2292c6430a049045c589c
SHA1 83c0437e15150dfb3c8f5514cc408bdc784ff7fd
SHA512 481872782d0b2f3415a0c7005fc8ceb987d7660cd37933285632e1986c140f428ba1a901fc5c1426dc62ba9c893f3ae9cbbecc12241b613fff06612726466113
SSDEEP 384:1Nu/5qd1QNWqSts9STKlznizmkor+o6+WbHftDN:1NU5qd5tISTKRkPorL6+en
TLSH
T14D82D01DF244EC099EAB1597E28713FAFDE0203ABDC10D3494F285EF4265E4665B6B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 20KB
SHA256 17be23370af7643b77b12abeacb08dd57e71187ec6140909cdb2d234ef359873
MD5 d24d693b6aa1beb7d66378521e2a9f96
SHA1 bc059499d844849fa8b4597f1f2d8efd601d929f
SHA512 c4027db901ecaac23b5746152462eaf79d6c22ba6fa39cf1654959f7afa8168d2b21304d63cf0e1466b00dbbec9100cd3a40bab67a9e3a6068bb0c451202260b
SSDEEP 384:hf67csffOv4m9thAZEhBZBBCV4rzXXqn6Kbi4lrHuUrHuUg5:hfSfq4yhAZEhB/QVgXXqn6gi4BHNHm5
TLSH
T11E92B0C31F599EC3600C86BDF902CA96399B0B89F172786F052ACDC73F4AB769C4A115
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 17KB
SHA256 f8a3d31eee5793909fe3531303161fb0f8b1c702e723aa3f9d735336fea58da8
MD5 9252861ec1a731371003d81e35a2ba55
SHA1 5481cf21fa7cb26bf74b59d30dc1d34f2c4cb253
SHA512 b00f1f432d4eec33e3230398f937dbe824de2cee61ddb9b8d7711d6459bc7eee28dcdf4e4ad3e565332331c239b351a2ab6ceef403449850d947b7a2bb6de97b
SSDEEP 384:VraaaFm7l49++VXU/Op57Q2475J1ylwNkPl9hW2+z:V/7lSpk/aw75Jiftzuz
TLSH
T159826EABA405497BF24EE370EBD34824471EA958F4D6BBC714A06F81B7E03816DDB139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 78KB
SHA256 9843169ca8afc41d5b0a63278f1a0169c1deb1adc7f7568e84bc0d0f9fc3cb37
MD5 89b53e12d0625de64a7565b6428a2d8a
SHA1 82134d3134ec0c6a403477243b8ce773f39bb992
SHA512 f152524681a63bef53aa3d117420bd5fcd67e8b02ae79c437549be21690e69d75ee5b6824250b71692991d959a7a4a193ac729645718beb8bb390882887f504a
SSDEEP 1536:7RJDcJuSFKZ4guD7RN/eTQ9iCvv9VPHYNDWI8VH5Q/ooIV4kNEK/M3n4RNCw/CFs:LYMDZAD7RNYQcYYNIVHqDkNEVIV/CFWN
TLSH
T1C47313D3EAF5720EBCA877B201B619759A1B6713744B831BB057EE10213AED612D347C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 22KB
SHA256 f8fe0182b96e926f3cdd5ac46a69e4b3e3b268b726671528d725da22551c4984
MD5 4812cba66cb4ce9999419113f5ccf508
SHA1 f15ac6cba3054e8b61c8849d297d972e459380e1
SHA512 064142a39e300fc613080bbec2a4deb133d4499c4353bcc3cf94df6bd19c2bb2d4eae2fb45638acf91c4ba5351cd26b4ba66a35236aefed3f7c88f6cf505027e
SSDEEP 384:QNXWVfx/iQBATlPLe/Ls7xESYPGRawMNF/dG/BuhcUfUiM:Q9Wxxv26mCPGRa7/dGB4cWdM
TLSH
T109A23A534C1C9A92942D96E87E171EAE6E4A2B5DEC4138FF84221FDA7E305660D9C02F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 23KB
SHA256 ee852c1c2cfff557cd9792dd73a5e9d1ce57420704366c80bcdc5bd7cbb9e2d3
MD5 0e6f3332aed7361999388257a93c1ded
SHA1 c2560f9a6592b2c30060c2069ec6768cf654e8bc
SHA512 60f421f64c03448c2cfb68f032e63ba8a1b2dd669126387960892e55bb573935346419e21c4491c93871f4fd08940ac988de6e99c1f229507536b77583b9ddef
SSDEEP 384:SduaGTvWcx6XR6DcgIKClZyzZy6qB/EyZ0:SCTvnYXbZyzZy6qB/EyC
TLSH
T121B273AC82F8C5C9424FABA6D9F8FC1A1E2EF0E79244458BB6DD02176F17C4196438B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 211KB
SHA256 6a34947409f7037c3ba43fabdc510ded5045a4ec0e89163cf6cf39504ecde14d
MD5 9cde01a8df2074fde0fcd6de80418e93
SHA1 8944268ce73fd71e841b28c59cf89a112981a8d3
SHA512 b5332e3072872ccdf810f9fcb402126c6359990a6bc5146570b4e7a4c3794d6262568228b561862abffd758c8766826bbdb3a62646f5a0f200641f8a60180cb0
SSDEEP 6144:UZ7tVGIlJ/zYSlYklWRoBx8TLYyfPeBPa:aaQriQuTLY6
TLSH
T18E24236CDCA89B953C0D375D5EE9C228892F51CF0A5665BFAF4412C903F6F2DB84B806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 66KB
SHA256 40c1b9a1c297746e02cd5614390adf6a51e9f0a024c77567a114eceb7a581895
MD5 3e49a405a533558fb4030d6fd74cc752
SHA1 28286d8d29687911deb9c049078bddfd36969579
SHA512 9951f2059ace7f1f47c67b8c3f0e10e3911b5156b3da172af8c9b70ca90ba1545e68788e800c09fe0859728bd18a976f304ceb99c50319d74b7e4fc4eb880075
SSDEEP 1536:ATgnSINAJrRJqerEKlFXhuX3saQdU3eZ/jkfJvkDIghmIQaFLa:AT+Z2fun0dUMkfRmmd5
TLSH
T10C63C7CAB6C275399BCB6074507F018AB27E9DA71448C478E62AC4F6383891D947BF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c814eb70ee3f42e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3c814eb70ee3f42e_0
Size 239B
SHA256 7240a954d7193396d71538de42f66b0aa663fec07abb7be3389db757aa233cf6
MD5 54eb1bbfa7640b07ba876e2062748ca1
SHA1 1695c8e36e9866106376c0eebcadaba0cf0098f1
SHA512 45bd83a22c7b1003145e8b9424369172241328fdb81bc4eef097301ddaf0d5efa5dd3bd150c57f2bec5dc024196b8595607acbc1dc585673c5249029f859fe73
TLSH
T1FDD0A7B388393813D90514B5DB9FAC078E11C0957889C041469E667FB7996712B0A6D8
MD5 SHA1 SHA512 TLSH

Submit Download

3e66eeef61ac0718_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e66eeef61ac0718_0
Size 272B
SHA256 f2112ed1865a7bd15673cc356d99bdead6aefab951b59adc91566db6115d6c6f
MD5 e8f153802f1ebdf43b94f3664fb9df53
SHA1 d39be3d07acc4154ba4db49a43e864f391249a0a
SHA512 3a3a95cc21683c5a72c6f2174451693d722de4a03c82654b0ec0dc396073cff274625c33b9354c1f5cf99500d8c82152a05ff7056f627e59c457c7ab20d35155
TLSH
T1CDD02B7B89115C41D91B4CF5B36E59484DA59572288DD150604F26239A30A77251B484
MD5 SHA1 SHA512 TLSH

Submit Download

46aef1ee2c802ddc_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\46aef1ee2c802ddc_0
Size 5KB
SHA256 a439daf99aea171dbb6ffd1c54f877f15218661dcc9512034961156a8d1a9f2c
MD5 8b63b7b5b002f16b769baf412dd8a536
SHA1 2b062365e7b1975d77dd6fd64b71cf31f23ad7f4
SHA512 51e5202cd35f15f2480b7731fa86718ceb21551cefe80e84a09722cd00686b3f2edada4ffd6c22132d9c8b53220520e9135a622a2e7cd1ae7f0398c29b42ef3b
SSDEEP 96:Nf7UNMthwtxXw0EmOR0q6EyS/O/zOIFasRlwB/KxY3OTv:NTINP9Y9UKI3zQSY3O
TLSH
T124C1C74672906E66CCA36EFF8062877A1766C4047A83D73E71D1B3501D291E20F9B8AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f2f3583351bbb94_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f2f3583351bbb94_0
Size 11KB
SHA256 60dbb40739541312fe4c8b3bd8fd6169d24efc035200362a3eef298341fac57b
MD5 1414ef3d81f26e262ca89cbe7c217250
SHA1 04a03ae89ef44bb593c82219805131f0b0cce6c1
SHA512 bc0f7be4526230c71d3252340d801354797b42771f811e1d14611a0c4b1896886c964bd6b5d816c535da4f59324f969e7dd98da301b2c19fb0bea972f209363e
SSDEEP 192:c3kR8BTX0sJhd089Mdtp0KGgygd93GWYOATd381yCY7OncYVx4C:j85XBd08Cvpag/XRYpTy1MCcYVxj
TLSH
T1E632622D2BA04B6ACF7657F94292C91BB33205483ED3D347A1E663393C202E14F9B55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6adfff33b75ba4d3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6adfff33b75ba4d3_0
Size 264B
SHA256 cee81ebf926f841b4e8fc57be202d25c0c1b4d378caebc9ba316bd9e09c5a394
MD5 b4d5e4b3114009b8f337748ec2800f16
SHA1 765481266a83eb2988735c66b7de7d9c567aba61
SHA512 b2877e6b069e46a0d0160fbc2d03c1859962e8b95df37dfddddea5159211738e18ca1099b963e2e16d554b75f3c92e02ddab20c2fd5148c440090a547f408568
TLSH
T153D02EBF40787802DC1698F4873A184AAF22B4282848E149E06954E2AA31C332286898
MD5 SHA1 SHA512 TLSH

Submit Download

9632a54db06bd19a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9632a54db06bd19a_0
Size 266B
SHA256 2fc2bdeee2c054f82643960b8a8c82cdd0eb106b74c347c54f25b1c02b246e51
MD5 42ef0f7bf2fba466594fd3b7ca543ff4
SHA1 a6175a1bc7f1310cb9da38cc0820569110748a84
SHA512 f49235aac49dbc41c71672dc2c4a9deb7f00f17e24193807f2071347ce5c681da87d80212c2cf358d8ab2d23658b1c7ebe20d64d9fdeba08fa37dde985656493
TLSH
T1ACD02B7744004D0AF83F04B8D6B225896E9162663C45D072A104B2D256748365547990
MD5 SHA1 SHA512 TLSH

Submit Download

9cc4994c9fe6e34c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9cc4994c9fe6e34c_0
Size 1KB
SHA256 fc69cfd4dff0d8a231ff9a53104fe1cc852c76339f62dc83cd199ebb0b2e84da
MD5 5fbb89312043a0c14b339a457e97c7aa
SHA1 b6e6f2dc3f0ed20ae9b13a1556de1ee5a492f4c1
SHA512 59fff9f9c6ff09c09e950bdc147af53fa8ec486f570cb9eb292171d02c10fa1a8379c667a4fc19a73a033b28fadfacceeb73e222e4aa1aa381dea87f1bdafac2
TLSH
T1D03163978B81EA31C93A25F28A56DFA9AB37914E3E8AD306306483341C475F6074B08F
MD5 SHA1 SHA512 TLSH

Submit Download

a297307799d48987_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a297307799d48987_0
Size 24KB
SHA256 41bcec1c84ab3f833d97094dd25aee4d8d6c4dfce8e2d32ee8d4bd940dfbf0c2
MD5 21887026666635b531b49bd68114f622
SHA1 bd47f104909bfad286498388092581020fcd4396
SHA512 f3fe5a08a02ef2c44241307c839c9f97bbd773bc71ac4678e1c620db1e18c91a2bc11eb38df7049638adc98d8ef2884a81a73153186ba68292485e7de7a6f417
SSDEEP 384:VuH8eW36R4q/uzz6tfctYjKsMCM+tCGlD+AvK8LcKXexjrUr0jK7fg/LEc8Bkv/:VuVW3U4qo3Izv9blD08Lvwjwr0Ag5
TLSH
T186B24A4A6B56AE2FCEA753F15392C627B33280487FD2C32119E553311C962E25F8ED4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c02e1cee8264df9b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c02e1cee8264df9b_0
Size 23KB
SHA256 a41bc469e4c6fd3edb32715cbe999534c51f06c69463f5715c019d76bf6b91dd
MD5 2978443394609b957b4f2ee701e420f2
SHA1 de9d3db7d5d2e1949cc31ef93f4e01f816baef31
SHA512 801c2352f4c9dcb51413cc01a2abf47f43c43def58343878aee07b65ebf275d4619fc1ecc22318303d93c2ea3bf526ab978ddd3db5899a4f476fb0032d47b3f9
SSDEEP 384:Yb0W0p9njGgXeZoaa1m/yGohMP8Ftfe6nuybH:20b5XcsHXHH
TLSH
T182B284FD9B806F64C5329BB0D1218A5225B14EACFDC6A70BB1B0D6652C4D2D10FB7C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c99d9558c7647e63_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c99d9558c7647e63_0
Size 267B
SHA256 60690fd184286503167f11458085a8a2b0902e61eebcf6d01ab0ebbe30a609cc
MD5 c148a52038494cf9ce428792ed89b6a1
SHA1 b35393d858e9a36598939aa3c3f3eb0c76161080
SHA512 9c163ad63b0f04754b23c0e6c84d3471875aad0deb221d5bd997a5eef4da27a29250e2efbda810302bb4eb0cd5d52a64814adce32bfd040fbc1cd479ec87c6b8
TLSH
T190D09577EC141C05CC0759F067B68E094F22D66DDC6ED64A5845170302520E325891D5
MD5 SHA1 SHA512 TLSH

Submit Download

cf630671d5a608bb_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cf630671d5a608bb_0
Size 51KB
SHA256 687e29d977c8811eee2d1e6a0f613524a42ae38096c6dc667b351a34fde440b3
MD5 69bd3c2d7d8ec8408587eb480acf437e
SHA1 2224330e895b226fdbdef433aacb4d8661fece00
SHA512 b191bc6fd01a53127d0af91d77af5029a2bc7f3992bab73e3026b3cbdd8872eef0c6d26e19c492737362ab84e32f307e6986a6d9bdb894de13729167c7094684
SSDEEP 1536:H1pYMchRtqtMwRgG77cx/GwozdqLFmvZl:HcMaR09RfNwozd2Mv
TLSH
T1E733B6517744BC91CF7A57F101624A67B33249C82EC29327B2E8B33A3D095E91ED99CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dad5bd3a2ce96abd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dad5bd3a2ce96abd_0
Size 98KB
SHA256 68ddd74159ccb55b9d9539f56748ad307e0f33f7626f34781c0e8b59af6b3dab
MD5 aaf1839d4f4a340bccda04ce9ec8f0f1
SHA1 a649f56989110a78e05994661bb5054e7489eceb
SHA512 287b984bea6de4f6f11cc20e0dbe9213838f14f0c3850284fbc7692921563f6c8a4bf5ccbd2d01ae5f11cb8add1cb1b2caaff60ac8e954169be5ebf709c1c9a7
SSDEEP 3072:D8n9uboDrbe7R7PfFTGhPsjA1OYODuw7HfIcvMTVTIfrvhfUjcDQAfnfnDUdxLxb:In9Bhg8ZHIS
TLSH
T10AA3E9B8AB40FC2DC96967F64103CD27773E40087EA7D30732A9E2351D4E7D91E65A89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df2b1bb5ec463519_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df2b1bb5ec463519_0
Size 1KB
SHA256 805e0307692b94173fc048a7c6e54a3b2c02c353fabf488e81eddd1b11bed448
MD5 845f11f75c9b8a426ac077d6428983b8
SHA1 d067e724e255d8895a212af762428a4bd5843ceb
SHA512 b41eafffcd2456775f798896723456db182b87b8d17d6992529f4b2bdc4fdf8d72c482f55a2d5f3e9a0fe14edbce0269f86f3195b79c3c35d824bae6e28faca5
TLSH
T1FB216262D7682A03CF390AFB93E985B6B777604A7B06E10A5284133D3C546F32A4F08C
MD5 SHA1 SHA512 TLSH

Submit Download

e229e451203c693a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e229e451203c693a_0
Size 126KB
SHA256 022d3242fb3b95ce83ec93f9d81bfd4580930616f2ab7470a3e08736e9fd556b
MD5 7ac513654465f3ba3928e7b2ffb63066
SHA1 cd4efee2039e3a841ee617ec80d9bcaf5994db8a
SHA512 4b7a069012bef198f5eb6b56c12ec7e53ab3139edf7fbce88dcf29e81dd9c6791df729f3edb80906015c3448c66d42d91083de5ab9a653543969b39f2536e139
SSDEEP 1536:UXR5k1xPnbwKbPl0VV235lWjottEi39GWiwM+9Bglh5JCi9SAItVl25m:uGjwKbPl+kpD47wM+9B8h3f5
TLSH
T17AC3E9252F60AC95CA3257F541738C27B73384487FC3D72B67A8A3362C1D6E61E9A44B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 cec1c9339e7081aeacfef26bb7403d97f3c1d75b013db48ef55d0c00d47505b2
MD5 6f924d2dcb45278b0a7646250123f144
SHA1 9715d0b5a7afd3472c4633be85604498fb114765
SHA512 1dc96ca591015caf9c10efc6d7e889726c8ef6f676d87ac5ec78fb850975043beb3dc37c64b26295b2c3a63afca924ba3104c76d488b730aad55677c700a22f7
TLSH
T15C418FF783E4856E8A0196F0AA28AE2FCF2D0615431C7D6A85D4AF1B93F3571E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bdc658e69ea35cf9b18b75ed2d757622da7fad66d991e3b858b795592ed3e41e
MD5 a0dd749fefbe26be67965874d1c3a11d
SHA1 0e1cd2ec42d35cd43999170ce0151dfd2833900e
SHA512 beddda3c0d532f45cb2546ceb262b4f0db55be0e5ba41ab8e5c943b54c2b8b370e635454b5dd2bb45ec76a31fbf42f1d877a29c3f33e727fddc595d6e2c6c72d
SSDEEP 192:sxZ6RDjM/f2snHb16r9g1IdpgbHW6+WN7eNfYzuXZ+3Ig4J:sxZ6lM/f2snHbs/KHbMfJgc
TLSH
T13E32D8557E38A93B8CC7E219BB157F53D6F5103291951E48BAFC8A1C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3f74357ebc5b443d6b5b4cbf2fa630a18dea171d183a14f2204e17cc3d6e4cc5
MD5 426c4a5a59791bb7af9034a0c46c63ad
SHA1 43327312214b23401d924709544285e6066939f8
SHA512 d0da9c5e48f8f01066ab8f6b7c81f05ec2071a61a3fcdb855d1dea1bef162a649bf1664e84a4ac8388ba945dce2c502782220731d2e8dfeb79e68882beba39b3
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9l1IdpqfHW6+WN7a+hYzZeZ+3Ig5sJ:sxZ6lM/f2sPaGbs+UHbrhNg6
TLSH
T1C542C8567E38693B8CC7E219BA157F53E7F5503291941E48BAFCCA1C05E7ADE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e11f64a4d2cef2fe909d911b29ce8574d6eb9c4aa9f211a622bc4e91a6826d70
MD5 6395a7e542970985008e371746fec459
SHA1 6e7927bea7c77d5f470ebb31a9633260fa40753e
SHA512 c904831ea600a5de861ab6484a104d8ad00f03d0b11d51dad6c63634d8e0479db3fe8df6f5876b2d48402e68db43e237febc5e8f70da994846fd6f5e9a31d582
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9D1Idpq6HW6+WN7ghhYzLeZ+3Ig5sJ:sxZ6lM/f2sPaGbswRHbohbg6
TLSH
T1CA42D8567E38683B8CC7E219BA157F53E7F5503291941E48BAFC8A1C05E7ADE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fad98f85fa4ea95b0a66db444bdce2ded33e93713c608397e8af1026417e63d3
MD5 6325aa2694fc49448458b99784aeb4db
SHA1 0563fda5878eaa1efab92afbde6315d950c33e96
SHA512 1ba6231239e5f75dda0c1daf12b9e62cdcb8064cb4ddbb0310227715d48b60d9aa7e3ddbab7bb8dc3c3ab38542aa5b44a3ffe16cfd71bf4da16c64e81bbc4aa2
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9h1IdpquHW6+WN7I8hYzTeZ+3Ig5sJ:sxZ6lM/f2sPaGbsa9HbjhPg6
TLSH
T18E42DA567E38A83B8CC7E219BB157F53E7F5503291941E48BAFC8A1C05E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 745cdb3fc7ed6e20f2cb7643ee011bd9eaa1f3a488351014456931111a65d2cf
MD5 72e470d355fddf4312af48dd63bff142
SHA1 9a658662904d47f0f8e2a60c1e96abf17498eade
SHA512 d6569ef8474cdf67f92533ec9fb5b3b8775cb74b2b53eb3603a24bc0d8d002b06e4233c36cdaeb66c44888b44a9a586b11ff7d36fe6c183c32ccdb36c45efb9e
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9H1Idpq9HW6+WN7EzhYz/eZ+3Ig5sJ:sxZ6lM/f2sPaGbsE6Hbohzg6
TLSH
T1C742C9967E38693B8CC7E219BE157F53E7F5503291941E48BAFC8A1C05E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 920b48f67a815d401db1c55c3047a3fd99bf80f51d699b5e2f5ad910841761b3
MD5 a0f7685ce1e544e44b4c2b3386da6f01
SHA1 384b9726a3f3c82a0e5839673550a000c891ff38
SHA512 8fbd782ef4ee1471b1a10c11f158fa28948dd5895c674c61567ad40975ccece595255605a00a601fed0bdc866f547c4ecc84090169e5c966e989d097dc7e91c8
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9/1IdpqKHW6+WN7PFhYzoeZ+3Ig5sJ:sxZ6lM/f2sPaGbss5Hb5hog6
TLSH
T1F042D9567E38683B8CC7E619BB157F53E7F5503291941E48BAFC8A1C05E7ADE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 56a39be15cb8401c4410a3bb27a9fe325d7795be5760d63553bf4086b8f2dba2
MD5 132affbba56e0ef51b9861ab141ed224
SHA1 9d965865c561f43b8f95444d0d5425f9bc184305
SHA512 11b606ba25ddb5a4137ca4d1051dc3040f970ed40a9f65e0852e1564cfc21e856c1afe969c4271f4c04ffc93cac74b4a0fead4d797ef9178dc8a1171cb60462e
SSDEEP 192:sxZ6RDjM/f2sPHb16r9i1IdpgEHW6+WN7tyZYzRXZ+3Ig5KJ:sxZ6lM/f2sPHbsFNHb4ZYgc
TLSH
T10932D8557E38A93B8CC7E219BB157F53D6F5103291951E48BAFC8A1C05E7ADE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 517d05603c8520e9c7249451c215ad1b428cad3c2369cbd835572ffb5789dcf3
MD5 0642f4cc2519a2f8a116f551b5fede59
SHA1 ae1319e5248bf14c90fca310953e9c2c70f3d2fa
SHA512 22e41c7b0eac5face33818cfbd892be8cb2ff7f8575c7a829d9982c2f5d34ee0d9751cc3af78fb49b34bff68e2a3b2cc660c5aecac5fe361011cfd2514cb84df
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9L1IdpgCHW6+WN74fJYzFdZ+3Ig5sJ:sxZ6lM/f2sPaGbsQTHbMJYg6
TLSH
T1D932C7557E38A93B8CC7E219BA157F53E6F5503291941E48BAFCCA1C05E7ADE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ea1e1092e0e7ecebfa11e60bb5799880a267a86de29e739742c93a8e3aa0d1c6
MD5 f23a0b80007e3b4a2d99e47bbe38a677
SHA1 9700c5f6cf53e45f52c5f741a11391473fe56dc4
SHA512 1f27aae422b5ee4842069f53478fd5f2f48b3eea2e97e18d36e4668e84c0175c876b7da16d620f68e455fea4f3651fb31e9397e38d5a2dcdedbf42412176a03a
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9p1Idpga4HW6+WN7SBrbYzzdZ+3Ig5sJ:sxZ6lM/f2sPaGbs6V4Hb4rbeg6
TLSH
T14B32D9957E38A93B8CC7E219BA157F53E7F5503291941E48BAFC8A1C05E77DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 dd1e2796a1a3fbb7bbaaac64034907a5e6b43ede7cd534c8b9cbccd21e92eb5c
MD5 723527b4ceccf3e772f43dd56ebb8a6f
SHA1 0bc00944392e11e31c68a4be038e26911f63b5af
SHA512 169e8682d7d0fea10f227702701d5b52a290ff035eeb03ccb4f54acbdd0fb122e102dd08d8c349b534308a2a1f696fba771404770d618cf65251b969f16bf2c5
SSDEEP 192:sxZ6RDjM/f2sPaGb16r9V1IdpgMHW6+WN7b8hYzedZ+3Ig5sJ:sxZ6lM/f2sPaGbsGBHbch7g6
TLSH
T1A432C7557E38A93B8CC7E219BA157F53E6F5503291941E48BAFC8A1C05E7ADE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 5493e5e2df826c749b2489c3fa57c94b391dd5dfc9f3155888e08c41af02dc67
MD5 c94211b486f25e1c8b51e126d453b8ba
SHA1 915caa6a976983617baea659e7137016dfe6d697
SHA512 c0d49becf1ba295da52c3da77247edc7cb80283fa1d53681c342d19d9bee06cce422226e9a79c770a472a70c6f09e951f33b411eb0e04bc8aaa00e41381fd3ef
SSDEEP 768:t9k7uKw7pLuLzg0WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV1Mi5LlWYSBeron:t9k7uK8Ezg0WvqiEau1ja0Mi5LA3B1Nx
TLSH
T1CAE2FC7B780CCA7E4F800E9CED1A7F9B6EA802CB56D8C95087F9945C02C76EE51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8c4df940960a674151e5faf6a3d9f321ce42d63f086c63a57f469053dacbf8bb
MD5 f81b5889ddab366073dd465dc190c2c2
SHA1 6198650b2a4d2acd844a02fabe33e76b0a32935f
SHA512 2fb6a461fc2728f35a8066c2eabee8b67156119a37156e0b516811718d275cbc82787859b70009c3505c5685b37c6315801380819d430bc550009ddedf872464
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYT3MIXKZqYHyNlIJKek860IbKdn:KIbCKc3MIKZqS2lCKek10gKdn
TLSH
T1C391271A357B06013C7E6D49929AD6379F4235A33454A8AF7FB800718EA6E124FFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce6cab81-cf86-4a50-bdb1-5f6061502d7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ce6cab81-cf86-4a50-bdb1-5f6061502d7c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597303.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597303.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ff3e234e149566db0cf3314ac327a367967f648c1adfb7a2f88d58c180afe86b
MD5 ef577315e6e8c541d63f5efc6f644728
SHA1 78c886d60edf144075b41228e65a67c213c495ec
SHA512 159e51696c24a6a8ffd541e472f0f5b1db6b7d5c2b1e9c8fc315bd9f954149d2291670b2e417c5c2ca2d42be283edf0511d0933f66b3b15d018b9ace11b9b696
SSDEEP 384:nsZcI2sNjUYr8abjiM5n2VPnySllYJTfY81F92Bu7:62QXb5inZuTHGBu7
TLSH
T117929EB12C66AC7699ABF001F48636074FF841BB96C89F40EEEC9B1D0197698172B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 d1ca14e337fff706bdd901a2ccd3db61ae282ab388fefcc602c76a3a245cf54e
MD5 a886b8348184a8803db08b6b17c154b8
SHA1 049e52cc20817c22be3cb84d4d422ecbade9fe6e
SHA512 0e6d0e2673b952c3b24f9fc8880ffa4107515b967fe722bce7e032d029f52288198c64705b1ad31f92a4b82c8f0d81379d58f544db6060d2455024dc2f8c288a
SSDEEP 384:niiFPZcIosNY8TUNTUlIlYr8abjzI5ZDfQz2V/nySllYJTfY81F92Bu7:pFHo5wgmXcgzEnZuTHGBu7
TLSH
T170E2D7F598D3993AE8AE5383A77D2D468EBCC16775889980BBD85D0CCC831BFC706815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8a80d6b0c8b24e404e054a28fb22bf4c4573816367d8b5ecaf347f2728198ce9
MD5 0c396e0bbd844f365ef2ffdb9cece14e
SHA1 18334257825513a0e86e1e5589cdae8b85f2ebb5
SHA512 ba786d7b998924fc1f65bb194791c0b318a9177d179952581da8bb60eae4fa8386695deef95718018c2137710a414389be23be5f91fcb37793cd5d751b92bf06
SSDEEP 192:MONa64BAQmiUyB1YW5GBPKScC2567aDnphU6:MONa6eAiiWE2BHU6
TLSH
T184021A396C796C7B9EB2AD05F48737175FA4117BE6916B40EAE82B1C00D724C230392B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 45df0c44cb315b5c2f4a7ce47a53683907206063ff4c99c61ca86788202d5a7f
MD5 0749282aecbfe4522a23e62f663901e6
SHA1 07db00e5555049378472423b47b21a1a1b842821
SHA512 5b9e5f1f05057447f33db1d45b8b93cb91fe1534688892c20277dd9df0294d3a593ab1a35797bc084e26471181975ffc698e592c89382fb27a6eca7ab8a3cfc9
SSDEEP 384:nyZcIhsNjUZr8abj8aln2VwnySllYJTfY81F92Bu7:AhrXLdpnZuTHGBu7
TLSH
T16F929EB12C36AC7699ABB005F48637074FF841BB96C49F44EEEC9B1D01D7698172B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5508f4506802b68a6ffc81ea67a159953918e51d80a81117e5f038864ea0c3ed
MD5 8fcbf5457b4317b856aa93942f329f53
SHA1 1fb6938bdab8c27a1413553f3f69f50d45cba0e2
SHA512 51dd17e84d187db9364adfe5e65f58bc5e2daa85c38fcd007fd33848d0643c1b05636c1a2ef7872c73a917e6e45607b09b955583595b31e61ca5f8eca861064f
SSDEEP 384:nsZcIasNjUYr8abj6+Nn2VhnySllYJTfY81F92Bu7:6aQXVlMnZuTHGBu7
TLSH
T167929EB12C76AC7699ABB001F48637074FF841BB96C89F44EEEC9B1D0197698172B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5ab6e4c99dbeda48ba4bc8b9a4f8a6f7fc24f379f66ad7e6c0ff3cc598a56bc0
MD5 d182b3bd587c149586ab806a41db4fe5
SHA1 8a6e3bb65f414d6d58157c04056035bec59a5751
SHA512 567bbbb95d7d8485a7aaa5c1ecefe7c9b75ac7a3ddc8ae02732fddf9344c4d5a3761b7fa60d2b75090089e5eb045a6e312abb5a36f3cd1f183d1a30fa2741835
SSDEEP 384:nfZcIysNjUVr8abjvbO2n2VfnySllYJTfY81F92Bu7:3yXXjOcSnZuTHGBu7
TLSH
T1E4929EB12C76AC7699ABB001F48637074FF841BB96C49F44EEEC9B1D01D7698272B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5907ae115c6ef9688cf2376bc407b7ccf53eea803918351701db316bd92e6af5
MD5 b04a4b65e1c6899448efcb5704a957d1
SHA1 d084586e41f256f63cf0988729c58b5a670b6168
SHA512 55b64b7dcb36829d20593684b26f3854424a04351571f2e7c4de34a17c4c7ea043cf785acc343ce31c65e769df3a9f43f0e311e8f90087224be400ace82a5128
SSDEEP 384:nfZcIvsNjUVr8abjpY5n2VvnySllYJTfY81F92Bu7:3vXXe5WnZuTHGBu7
TLSH
T13692AEB12C36AC7699ABB001F48637074FF841BB96C49F44EEEC9B0D01D76981B2B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 74ccfde61558b187e2d45d6652433e384e421cfcdc045d0300072a9c9b2e2072
MD5 dd506b99aea4e4959cc5116c15001635
SHA1 b923f0fc454c4de69ad2a579a8d07fd42cd8e924
SHA512 04125070885447f39072db615cb9a98be9495eefaf789a4fcb1c869adc59a4cee36fbc786bc616c11136b8b82a1f8825c67bdb50ae7634c63fe0d3cb00e650d3
SSDEEP 384:nfZcIgsNjUVr8abjSb5Zn2VRnySllYJTfY81F92Bu7:3gXX8ZcnZuTHGBu7
TLSH
T105929EB12C76AC7699ABF001F48637074FF841BB96C49F44EEEC9B1D01976981B2B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0bdb9c67ba940f435109002879d655e3008365f939abeec9b8601d125ec0bbb1
MD5 8dc3a5daea7c226c960a55342aed12f3
SHA1 7f0c183ecfe0c7e2d9f1ae54e8364768272602b7
SHA512 3a2625a9e630789500a1795704f355ab7616a0fbec3c19ee8d4c052d7283537fe2cf23d16356ac7d0c40403d24ce43db9706edd6071b7805676eeb5d8befbd92
SSDEEP 384:nsZcIIsNjUYr8abjvjFn2VcnySllYJTfY81F92Bu7:6IQXb9pnZuTHGBu7
TLSH
T139929EB16C36AC7699ABF001F48637074FF841BB96C89F44EEEC9B1D0197698172B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a0250eeadca5d2aec600941b74bf990ed6c5b98c4c54ee98f9838e7b5cb1bb8f
MD5 69c7b22740f1ae9611cef4a45365c060
SHA1 623fa8956c6166e584bbb55b5a8e8b58a832e11b
SHA512 ee7947b5ad727d1d60258119ad4bf2770b79d257a1b6b8105c2ac8e2493c1bc8cc6fd54ad78bc3a281ee64fc0d5757c2dec14f50b4b51069a9ead9ef0d22370c
SSDEEP 192:5ONB64BOQmiUy9YX5GBPKScC256bePNsWwqq91U6:5ONB6eK/XE2VCnU6
TLSH
T1EA121A75BC6AAD2A5EA2B000F4C633575FA411BBE984AF40FAE86B1C00D775C3B1B517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b35f7c765663ae36bb2f8140a68341dd52e3edfa2c55dc70b9892d16d03a92ef
MD5 737afdeb2707da0c71e1c8a38a80e83c
SHA1 49d31e5fc8d36e855b3f53ccdaee2cc2223bfc98
SHA512 28c9bce9314589cd1ee4743a4b93b44485f80c452e37eaf802553191bbebf4a4cba6e1aa6ece91b7a5ea60c21631dc9d6fafc04d54f5896f50dd927336ee63cc
SSDEEP 384:nsZcIvsNjUYr8abjXfVn2VqnySllYJTfY81F92Bu7:6vQXvtXnZuTHGBu7
TLSH
T1BD929EB12C76AC7699ABB001F48637074FF841BB96C89F44EEEC9B1D0197698172B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 adb96fd149d288d15df259272cc6e9cd511bbc29deb8546a65aff081444fbe2d
MD5 cccc2f5496c706352df75cd57c13bc86
SHA1 750391147f2a232d03bad052faf1ddf3bbaf372b
SHA512 c3c976e79579baca6d747af15ddcf4158842d939f4602d8f327b891b5bbd63d7ccd866f0b03e06fe4bc5962323bd2b2e62142878571d9efdbbbd03394b99c36b
SSDEEP 384:nsZcIKsNjUYr8abjBApn2VmnySllYJTfY81F92Bu7:6KQXqJTnZuTHGBu7
TLSH
T13A929EB12C76AC7699ABB001F48637074FF841BB96C49F44EEEC9B1D01976981B2B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

8f57bbb3-c197-4be8-b153-09bc688b79d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8f57bbb3-c197-4be8-b153-09bc688b79d3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04b59eeb848e2ad2188bc434e37d2919ca3dc56e7ec6f8e277dfb377ad9c4f76
MD5 9748ea7fe5b4588f39c731b263d50612
SHA1 698235f1e29620c4ee9496dda3efd3c37703ee71
SHA512 05992bcbdf51481584e2d201fd204c8ead517aef6b74087122edce786e195d41ef9e89fdf892fcdca77348028ff02e8044b78ac2459e785a4bb3870b455b09db
TLSH
T12041E45CABE91109B3B77F5A9BF6A86D497B7D772E0690AE00010D4F0A72A00C9A1733
MD5 SHA1 SHA512 TLSH

Submit Download

4002610f-dc31-439d-8511-c4b11da67e27.tmp

Path C:\Users\Admin\AppData\Local\Temp\4002610f-dc31-439d-8511-c4b11da67e27.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f37dc38-837e-4978-8b68-3861ce471309.tmp

Path C:\Users\Admin\AppData\Local\Temp\4f37dc38-837e-4978-8b68-3861ce471309.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4840_1556331759\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da48caac-93f2-4ce0-a1f7-d54158a383fd.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4840_432181482\da48caac-93f2-4ce0-a1f7-d54158a383fd.tmp
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download