b0eca83117bd48b6806c14ef650ce975a366fb5d22af3f6bf9b775c7bf83ffe2

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Size 4.2MB
Sample260817-2w2efa11cs
SHA256 b0eca83117bd48b6806c14ef650ce975a366fb5d22af3f6bf9b775c7bf83ffe2
MD5 037937409861aa949526c241c0ce1194
SHA1 c6135d5e53ceca6bd809dee99394a5b89b9404f7
SHA512 9861f7282503dfb9274e92dec4a5dc61ca289f9ce4cda88f840a04dc0941718c7889d737ccf64afa786814a87e1630d9f6682c9316c3d97cb6744149f583e121
SSDEEP 49152:5nN/F1jtGPD1yHLTSgkJF5LhQV+ajx+fYJbRcG2IERwUmG4P/h9ssEt:VHGPfgo59CfIfYxRcfOURmh98
TLSH
T11E169D12B910A03AE5D2C171B96E9BB24D6DDA3013B884D3DBC09DF895235D3B73E74A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3656_1467479196\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3656_1467479196\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3656_1275172635\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3656_566458939\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3656_566458939\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3960	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314810299902812"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\URL Protocol	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe,0"	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\shell	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\shell\open	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe\" -command \"%1\""	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{AE36D0DD-DAEE-461C-8AAB-1F0DF7ADB953}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\ = "URL:beamng Protocol"	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\DefaultIcon	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\beamng\shell\open\command	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
1764	msedge.exe
1764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs

pid	Process
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3656	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5784 wrote to memory of 3656	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	89
PID 3656 wrote to memory of 5496	3656	msedge.exe	90
PID 3656 wrote to memory of 3364	3656	msedge.exe	92
PID 3656 wrote to memory of 3960	3656	msedge.exe	93
PID 3656 wrote to memory of 3364	3656	msedge.exe	92
PID 3656 wrote to memory of 3364	3656	msedge.exe	92
PID 3656 wrote to memory of 5384	3656	msedge.exe	94
PID 3656 wrote to memory of 5384	3656	msedge.exe	94
PID 3656 wrote to memory of 6052	3656	msedge.exe	95
PID 3656 wrote to memory of 6052	3656	msedge.exe	95
PID 3656 wrote to memory of 6052	3656	msedge.exe	95
PID 3656 wrote to memory of 4652	3656	msedge.exe	96
PID 3656 wrote to memory of 4652	3656	msedge.exe	96
PID 3656 wrote to memory of 4652	3656	msedge.exe	96
PID 3656 wrote to memory of 3936	3656	msedge.exe	97
PID 3656 wrote to memory of 3936	3656	msedge.exe	97
PID 3656 wrote to memory of 3936	3656	msedge.exe	97
PID 3656 wrote to memory of 5472	3656	msedge.exe	98
PID 3656 wrote to memory of 5472	3656	msedge.exe	98
PID 3656 wrote to memory of 5472	3656	msedge.exe	98
PID 3656 wrote to memory of 4508	3656	msedge.exe	100
PID 3656 wrote to memory of 4508	3656	msedge.exe	100
PID 3656 wrote to memory of 484	3656	msedge.exe	101
PID 3656 wrote to memory of 484	3656	msedge.exe	101
PID 3656 wrote to memory of 3788	3656	msedge.exe	102
PID 3656 wrote to memory of 3788	3656	msedge.exe	102
PID 3656 wrote to memory of 1604	3656	msedge.exe	104
PID 3656 wrote to memory of 5512	3656	msedge.exe	107
PID 3656 wrote to memory of 5512	3656	msedge.exe	107
PID 3656 wrote to memory of 1968	3656	msedge.exe	108
PID 3656 wrote to memory of 1968	3656	msedge.exe	108
PID 5784 wrote to memory of 2412	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	110
PID 3656 wrote to memory of 4092	3656	msedge.exe	111
PID 3656 wrote to memory of 4092	3656	msedge.exe	111
PID 3656 wrote to memory of 4092	3656	msedge.exe	111
PID 5784 wrote to memory of 396	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	112
PID 3656 wrote to memory of 4192	3656	msedge.exe	113
PID 3656 wrote to memory of 4192	3656	msedge.exe	113
PID 3656 wrote to memory of 4192	3656	msedge.exe	113
PID 3656 wrote to memory of 4324	3656	msedge.exe	114
PID 3656 wrote to memory of 5888	3656	msedge.exe	115
PID 3656 wrote to memory of 4380	3656	msedge.exe	116
PID 5784 wrote to memory of 200	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	117
PID 3656 wrote to memory of 4912	3656	msedge.exe	118
PID 3656 wrote to memory of 4912	3656	msedge.exe	118
PID 3656 wrote to memory of 4912	3656	msedge.exe	118
PID 5784 wrote to memory of 2732	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	119
PID 3656 wrote to memory of 5764	3656	msedge.exe	120
PID 3656 wrote to memory of 5764	3656	msedge.exe	120
PID 3656 wrote to memory of 5764	3656	msedge.exe	120
PID 5784 wrote to memory of 5340	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	121
PID 3656 wrote to memory of 5876	3656	msedge.exe	122
PID 3656 wrote to memory of 5876	3656	msedge.exe	122
PID 3656 wrote to memory of 5876	3656	msedge.exe	122
PID 5784 wrote to memory of 464	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	123
PID 3656 wrote to memory of 5888	3656	msedge.exe	124
PID 3656 wrote to memory of 5888	3656	msedge.exe	124
PID 3656 wrote to memory of 5888	3656	msedge.exe	124
PID 5784 wrote to memory of 3560	5784	2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe	125
PID 3656 wrote to memory of 5116	3656	msedge.exe	126
PID 3656 wrote to memory of 5116	3656	msedge.exe	126
PID 3656 wrote to memory of 5116	3656	msedge.exe	126
PID 3656 wrote to memory of 4548	3656	msedge.exe	127
PID 3656 wrote to memory of 4548	3656	msedge.exe	127

C:\Users\Admin\AppData\Local\Temp\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-17_037937409861aa949526c241c0ce1194_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stea.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ff8c863c188,0x7ff8c863c194,0x7ff8c863c1a0
    3⤵
    PID:5496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2000,i,13966934002718287894,11253525901060009973,262144 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:2
    3⤵
    PID:3364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,15346783648624089473,2986565223971150986,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2716,i,9140366475842039634,13444599236884049009,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:13
    3⤵
    PID:5384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,9739831262689488529,2787688311994701944,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
    3⤵
    PID:6052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,10222569302193074206,12008786783868252828,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
    3⤵
    PID:4652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,10391651003932436170,11604662480995294395,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:1
    3⤵
    PID:3936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,3516565867964033186,7269535170954478670,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:9
    3⤵
    PID:5472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,11487386714494371508,8014184584305989951,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:14
    3⤵
    PID:4508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,263028945621511545,944607392442306991,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
    3⤵
    PID:484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,9076471701513048771,10344054345768133364,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
    3⤵
    PID:3788
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,12057882257269786551,5416341201749147643,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:14
    3⤵
    PID:5288
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,12057882257269786551,5416341201749147643,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:14
    3⤵
    PID:1604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,16547729152798025082,11311266437871862202,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:14
    3⤵
    PID:5512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,15546954186744648617,17453097943953584131,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:14
    3⤵
    PID:1968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4272,i,3527484583088833252,1888306574271926106,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
    3⤵
    PID:4092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7080,i,15856467792145260825,17846808054178017105,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
    3⤵
    PID:4192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1304,i,5861963158566764808,17138760061400014024,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=1296 /prefetch:14
    3⤵
    PID:4324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1308,i,14790226968125140373,9363527208416001674,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=1444 /prefetch:14
    3⤵
    PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1312,i,12591154591684056795,8273482161305962911,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:14
    3⤵
    PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=3564,i,16210076399389947665,4051865859120744955,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
    3⤵
    PID:4912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5380,i,18428927929156439238,5039512005832885242,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:1
    3⤵
    PID:5764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6736,i,18042298275608416544,17518745124476620214,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
    3⤵
    PID:5876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6452,i,15665930667952441264,2669927312745796806,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:1
    3⤵
    PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7300,i,297987224439228932,11284866043337321389,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:1
    3⤵
    PID:5116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7564,i,16590033332883116372,16476410021508128733,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=7588 /prefetch:14
    3⤵
    PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6264,i,2306906265927222955,18142607930662371144,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:1
    3⤵
    PID:5632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8012,i,11946971540022778454,5688257124084499340,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7360,i,5095060499122729537,2056357606249706996,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8196 /prefetch:14
    3⤵
    PID:6292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8340,i,16427536734652003758,4193936641077696035,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8188 /prefetch:1
    3⤵
    PID:6396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8396,i,14998820019957913496,16131519826745582771,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8020 /prefetch:1
    3⤵
    PID:6816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8380,i,14886041721502970011,11312119968086817113,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8580 /prefetch:1
    3⤵
    PID:3512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8696,i,6121678398119187805,7062587020818855306,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8728 /prefetch:14
    3⤵
    PID:6564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5288,i,16119076973826790292,11324244625002538351,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8872 /prefetch:1
    3⤵
    PID:6704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5468,i,16210630005694466864,6880998162019611511,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=9048 /prefetch:1
    3⤵
    PID:4148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5324,i,352438827497085520,1480314490438294136,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
    3⤵
    PID:6332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,6360570431126961440,18017500501105522018,524288 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
    3⤵
    PID:3368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5476,i,17787701718939162252,10775683147775472241,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8760 /prefetch:1
    3⤵
    PID:7124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5540,i,1052360749824338945,1710561685506435690,262144 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8864,i,12527206191304252173,9783072488437598816,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=9252 /prefetch:1
    3⤵
    PID:2876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5488,i,15050388509488087230,18321140440682714494,2097152 --field-trial-handle=2568,i,14474186345786821755,9842143732012611063,262144 --variations-seed-version --mojo-platform-channel-handle=9420 /prefetch:1
    3⤵
    PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:6380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:6800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:6324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:6740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.beamng.com/UnableToStart/ExeNotFound
  2⤵
  PID:1684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BeamNG.drive.ini

Path C:\Users\Admin\AppData\Local\BeamNG\BeamNG.drive.ini
Size 23B
SHA256 27f09fa704d0672b7fd624a5599b051a3596cf9467cd11a41c707f28d590ec08
MD5 120d791573593f3d5c33b05b6e9dce7c
SHA1 5db900ddb1f7046e8d6eb31cf229ebadf65bc355
SHA512 37d948dc718185d28459d57386f2cbd69f808c69f4f3061b50138412d015d4e0381b46177640194ad6a339502a5d3b79f5e0e5773af368837e99eed1bad6fa59
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000037

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000037
Size 28KB
SHA256 fdb81c0dad4820b2868f9a139641f5a85af8b41f44a38812eea711b01d1460a0
MD5 7e796da1400cb2308a203d57d683191b
SHA1 b65db17d6c51191cbde873451445239afbf38e37
SHA512 5417658598909a81a06245519e35c9045d67582c15c6a8769d5181951eed04f48f20eb29b90ade702bbe86ec9b9a734db44f98b3ccf0e4402f8bb807e0a66c02
SSDEEP 768:KvLxFEOCk/YujmNqVNZXWBURcE/Tmuu+S:OLxR9YkmNqVNAU/rGr
TLSH
T19ED2E1F06F1061B3E4EF0C50A6D2F4D9B34A697A2459A68D8BD0F3881D59937E67C223
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000038

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000038
Size 23KB
SHA256 b3ae20ce1d3bdee9a023049a234bfb3eca29ee5e7c4b95213d9b3669a1585f1f
MD5 2c74fc553d23c55bc53bfeb940d46c85
SHA1 cd0991882c121f20f98732c777f0f5fb3af82c09
SHA512 75540585da814a252817ce85db1038d5a02b60588401c0a52fda62e4df58cedc84c8d64a965b64444aafefb2f958e4c4060ea6e63d2a7e199cc806927950ce65
SSDEEP 384:pj7blKOR17gObAGHq2BNX4clxyxPMMy8KxTM6rviSU1n/7yDnG3IN8zAflalHLvt:pj7blpRdHXjXVaPMtTN5U1n/mDIIN80s
TLSH
T1D9B2F16E5A0EF581F758B862405EFB7A67017236A078739238729DF0735538107E272F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000039
Size 27KB
SHA256 bb1f62c013378276c370767f64b199fd027957ae58fd15df838f2690223340fe
MD5 23c8713035f38780b48229d9b69a9ec1
SHA1 3c57c9d676c161c0fb10de52f789576c23544cae
SHA512 3a7716e71932f6e3fd5d691f30976fe2bdeed714874098e5f0477910d06fc52f58753262d398c2ecd94641c8364c3c5e7f8037683236dbb07e6dbcf469344579
SSDEEP 768:lM6rvn7xgeyeY4iHTNBItrfLHJRO16LR09iwa80MN4RZ7af0YDXHvcQ:+Q7xtiz+dRpaVYMN4+fbLPx
TLSH
T100C2E130D8F356C0F45B74A8D78E397E980B236EE5A63BD669B2374990945E7F0C1C42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003a
Size 85KB
SHA256 f8c1310c6b5351bef1ed7a6d0ff52aba46264a4c42f5346e1d0a1fe6e189e1c4
MD5 4dd8a4fcba34eb94ee58472f8e3e5312
SHA1 ed7f1fd4369906eb2f0b649a5025bb0a48903df4
SHA512 b1415e8d9b4ddd58954ec7984b7896e71f87207401962d3467472ff0ad541e5091d69592cc1700305d22e89bb8d43761d87954ba3e2f579275701f11b839632c
SSDEEP 1536:X4aVbD3cuTLui3M4xjY21BbqNNswyFpaoja/91nJSqeo6h6Xga0iOS8l47mI8Ov/:X7cuTSi8qDeNNswNobqe16Xlsb+Z8a
TLSH
T10A8312095F69762F81893F25F4BE31A756AD1D773BA9851428CE390854E0CA00FFB9B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003b
Size 54KB
SHA256 0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7
MD5 a1ecc3b826d01251edddf29c3e4e1e97
SHA1 9394f35bd2addd24666b79bfc36d4f9d247cb01d
SHA512 2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a
SSDEEP 768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81
TLSH
T1244328747F6A5B2BDE839DB9FE850E5160F098C61F43F123C09E98522C7B7A88979143
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003c
Size 75KB
SHA256 6f67ab17872ad1359826c58feb2fbf2d8dfd65fe7bb6d3c65e7c1a1e6c97b92a
MD5 b60f99594bf03592c410d7105ca11f19
SHA1 ea242f9c7dd16afb11fb531aacdc59db27af3bd5
SHA512 e5f4c6f00b8ab5b52b2d690a5ec3eaca14b5f20bc4aa78a32efa09a53b0d5f386bec0363de5f6c1ceb71c4027580cc712a9a74877be941cc353b6ca4afa452b3
SSDEEP 1536:cB0HwaXfUlo4cdxHz9AMl15wS8H9VEzvDP5CYye9csjo0:PQ8746xTjNP5dyco0
TLSH
T10E73126C6F4C6EB33E649075AE197E242AC847310692DDADD8878A4F76247F05E7C2C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003d
Size 78KB
SHA256 82812a6cbec3d06385ecb2ce95bd21452a224fd0c6ac6daf34e54074b1aea38c
MD5 ec0c4bfd0cfd0c30637ccc25e6ae9bc1
SHA1 104f04cb488d53b837a35475830b900b69d47737
SHA512 9b52248f259e5147620fa03f3dbc491adfe7291f4baef5fa07accf2cb4016d6a2b8baa6f967542fa474e4be6eda87a57b7a2b6c73f755467878051e3c20eb5cf
SSDEEP 1536:SlXq62GdQNNDXlkuxnyMm1vmTTX+NkUhM8lvOrvpU3bz0:Yq62SQNh1krIONdC3vp7
TLSH
T12683029F51E3C0DBD1452B66CFC3E072528073A195EB48E77FD0A5621945F83AFC6886
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003e
Size 78KB
SHA256 801dca2cd4dfe538081c3c2bdab598e22deaeb95ef7524cbfad7b6301dabfe21
MD5 c64b0197887dca77299832a8403f05c4
SHA1 8455f1d94666f72a642681f9c6b4c31b963f3ceb
SHA512 b71409176b377c98faf9c0292697571799181c5e5adf54dc430ddef3da4eb029ce7d06979e48a156ff71489e99b9dc66e55fee9bb17fe79c9d2b3152eec5a7d5
SSDEEP 1536:j6BWpH/r7w6pNJ/l6mX6MOqli+mKOQgQsUSb63WIuMHdpvDsv5WNgJB:GBA/GmqEc+kQOt63HzHvwv0WD
TLSH
T1177302196FD3E27372EBB6F0A629972C5F5D241E4306C68F44369361E13256CBA731C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f
Size 78KB
SHA256 81366cba3d31ca34a30d7a03213637fc0d9e645f8b17685fd667f1be958c18bd
MD5 1080d50e2eba79e1a90c05d6f0443636
SHA1 b151e8fd9afef1cded3254322228aede872536c9
SHA512 3914726c3c4095a8fee06492a25c7a4f96712e309284236b7fa81bf221de8daf4578f71747d289c13823cdb81b163b2cb8300e36b7bcaded1cae0f209800ef2f
SSDEEP 1536:24xtQ+6qXexzJZRC/IIg5TEgHbAFhwkKJWHlARjIHkVdwxbxopls9y:iIezPcIIgwg0FikJHUR6x+co
TLSH
T1DD7302C968C36EA9E0F53BFCA7C14E5D659E366D034A8159CFF787C9E12510A0393B0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000040

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000040
Size 78KB
SHA256 a7a235d31bf207fdb9ac7681b8dbb816546e091b9af6ccb704ce7ae9021295cf
MD5 4200eb680dee8475c1694d33dbd0909a
SHA1 a3071b501b478888fba5a8587c29afe3fa2a1d35
SHA512 79b57c69a66d49b9218486f8146fbc74b369977e44fe45aa9e9285a6cce1d47f36523a29dd6cee327813dc070ba4c25a72dc10720c7664405ade89cb9b0f385f
SSDEEP 1536:7EKFoGKUKHw5+ygzyYS75nukFMSQdkCFT4gaCDaTJm:7hFn9TYSVurh4bCkY
TLSH
T13073025CEF7ADC89F079097F85B6858FA1E118B41CB3994DD8B0E6805C6F5B088B4B6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000041

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000041
Size 78KB
SHA256 9843169ca8afc41d5b0a63278f1a0169c1deb1adc7f7568e84bc0d0f9fc3cb37
MD5 89b53e12d0625de64a7565b6428a2d8a
SHA1 82134d3134ec0c6a403477243b8ce773f39bb992
SHA512 f152524681a63bef53aa3d117420bd5fcd67e8b02ae79c437549be21690e69d75ee5b6824250b71692991d959a7a4a193ac729645718beb8bb390882887f504a
SSDEEP 1536:7RJDcJuSFKZ4guD7RN/eTQ9iCvv9VPHYNDWI8VH5Q/ooIV4kNEK/M3n4RNCw/CFs:LYMDZAD7RNYQcYYNIVHqDkNEVIV/CFWN
TLSH
T1C47313D3EAF5720EBCA877B201B619759A1B6713744B831BB057EE10213AED612D347C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000042

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000042
Size 21KB
SHA256 6ab018b1645de31f927e53583009988d260a4a632f370e346874705da902834a
MD5 502eed3d97ae284012c071d58a4dbf6e
SHA1 8ad9e1009770384e4e0a012335b02b65caf9bf53
SHA512 19ebfef9424bb0446158bea08d13175829fd8a7af37ff60be16136fc33018b9d2e72a0566afb403f3b74c42abfe65dab893cdfaf58fdc57d5f41c8950b5b6661
SSDEEP 384:oIIrwChhhcEcBUt8szI2qOV00QNw4CjUUUXxEvhluuuu6Z4cEBWGLM8CO9rMKqzw:o5cBp2fl0ju4w+s
TLSH
T175A27C639E4CABD3452D88537C895EF8BA1C414C5CF6AEFD18520E947AD6BC37C0E14A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000043

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000043
Size 33KB
SHA256 14da6c83192a48d068990786b96dea7503bf01f42b1b07e6d8d10fc2458cb771
MD5 3f9b59d718cdc1ae5981f809a6d1d1aa
SHA1 ca68c1bf5b4aa471ef21b6ca7ef813dded8e077d
SHA512 fc99d325bed1e3d0c477f7330e8325708d0d4d614c4f5873208fff79d75ad5e788f55d20d5555b8fe74bf5fe5738f5f642e0aecfaa7a167f49e10ffcc3b70c4e
SSDEEP 768:UUexKDAEbdIXB7uaRBZh2w9QsBlQ94brXFQFD1T:UUexPEbd8UwysBRFQDZ
TLSH
T101F202ABCADC7638CDC1D86C78F8595A549B5118CB4DE502EAE9F75C30F4B23A1C384A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000044

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000044
Size 18KB
SHA256 89b5dbede3553cfad9450ab92d2d653c8772d2d47649b836b5eebdb49c81c4a7
MD5 04ee138f1da2292c6430a049045c589c
SHA1 83c0437e15150dfb3c8f5514cc408bdc784ff7fd
SHA512 481872782d0b2f3415a0c7005fc8ceb987d7660cd37933285632e1986c140f428ba1a901fc5c1426dc62ba9c893f3ae9cbbecc12241b613fff06612726466113
SSDEEP 384:1Nu/5qd1QNWqSts9STKlznizmkor+o6+WbHftDN:1NU5qd5tISTKRkPorL6+en
TLSH
T14D82D01DF244EC099EAB1597E28713FAFDE0203ABDC10D3494F285EF4265E4665B6B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000045

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000045
Size 20KB
SHA256 17be23370af7643b77b12abeacb08dd57e71187ec6140909cdb2d234ef359873
MD5 d24d693b6aa1beb7d66378521e2a9f96
SHA1 bc059499d844849fa8b4597f1f2d8efd601d929f
SHA512 c4027db901ecaac23b5746152462eaf79d6c22ba6fa39cf1654959f7afa8168d2b21304d63cf0e1466b00dbbec9100cd3a40bab67a9e3a6068bb0c451202260b
SSDEEP 384:hf67csffOv4m9thAZEhBZBBCV4rzXXqn6Kbi4lrHuUrHuUg5:hfSfq4yhAZEhB/QVgXXqn6gi4BHNHm5
TLSH
T11E92B0C31F599EC3600C86BDF902CA96399B0B89F172786F052ACDC73F4AB769C4A115
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000046

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046
Size 77KB
SHA256 13ee4c21c4e09429fe2c14b9f96c5a7997e84b8914d9bcb8c9ab0581f002c2de
MD5 ccf584c510a241c0989fa0aabc2ae207
SHA1 85367a328277f12fd5e64bdc0b68d876c6dde42c
SHA512 35c89ab5e9c33bfd28b5c2275b5621bfe11b39185543248309b85af1d27fa556b063cc1a12bd27cea603909ab1a0d71b8e5e288634625093801fd005029bed0f
SSDEEP 1536:O5ZtYdhL6SZ5g+VxbL9KC5OXAiJMmnnyhsxjv92U4AE8wVwNYOR:1OSZ6+DbAuOX1JMq9xh/1DwVM
TLSH
T10B7302AB660601EFA227D874476B1B4F2B7CA3BE3FFAF51A9D5E0576013C480B44D069
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000047
Size 17KB
SHA256 f8a3d31eee5793909fe3531303161fb0f8b1c702e723aa3f9d735336fea58da8
MD5 9252861ec1a731371003d81e35a2ba55
SHA1 5481cf21fa7cb26bf74b59d30dc1d34f2c4cb253
SHA512 b00f1f432d4eec33e3230398f937dbe824de2cee61ddb9b8d7711d6459bc7eee28dcdf4e4ad3e565332331c239b351a2ab6ceef403449850d947b7a2bb6de97b
SSDEEP 384:VraaaFm7l49++VXU/Op57Q2475J1ylwNkPl9hW2+z:V/7lSpk/aw75Jiftzuz
TLSH
T159826EABA405497BF24EE370EBD34824471EA958F4D6BBC714A06F81B7E03816DDB139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000048

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000048
Size 22KB
SHA256 f8fe0182b96e926f3cdd5ac46a69e4b3e3b268b726671528d725da22551c4984
MD5 4812cba66cb4ce9999419113f5ccf508
SHA1 f15ac6cba3054e8b61c8849d297d972e459380e1
SHA512 064142a39e300fc613080bbec2a4deb133d4499c4353bcc3cf94df6bd19c2bb2d4eae2fb45638acf91c4ba5351cd26b4ba66a35236aefed3f7c88f6cf505027e
SSDEEP 384:QNXWVfx/iQBATlPLe/Ls7xESYPGRawMNF/dG/BuhcUfUiM:Q9Wxxv26mCPGRa7/dGB4cWdM
TLSH
T109A23A534C1C9A92942D96E87E171EAE6E4A2B5DEC4138FF84221FDA7E305660D9C02F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
Size 23KB
SHA256 ee852c1c2cfff557cd9792dd73a5e9d1ce57420704366c80bcdc5bd7cbb9e2d3
MD5 0e6f3332aed7361999388257a93c1ded
SHA1 c2560f9a6592b2c30060c2069ec6768cf654e8bc
SHA512 60f421f64c03448c2cfb68f032e63ba8a1b2dd669126387960892e55bb573935346419e21c4491c93871f4fd08940ac988de6e99c1f229507536b77583b9ddef
SSDEEP 384:SduaGTvWcx6XR6DcgIKClZyzZy6qB/EyZ0:SCTvnYXbZyzZy6qB/EyC
TLSH
T121B273AC82F8C5C9424FABA6D9F8FC1A1E2EF0E79244458BB6DD02176F17C4196438B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004a
Size 211KB
SHA256 6a34947409f7037c3ba43fabdc510ded5045a4ec0e89163cf6cf39504ecde14d
MD5 9cde01a8df2074fde0fcd6de80418e93
SHA1 8944268ce73fd71e841b28c59cf89a112981a8d3
SHA512 b5332e3072872ccdf810f9fcb402126c6359990a6bc5146570b4e7a4c3794d6262568228b561862abffd758c8766826bbdb3a62646f5a0f200641f8a60180cb0
SSDEEP 6144:UZ7tVGIlJ/zYSlYklWRoBx8TLYyfPeBPa:aaQriQuTLY6
TLSH
T18E24236CDCA89B953C0D375D5EE9C228892F51CF0A5665BFAF4412C903F6F2DB84B806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004b
Size 66KB
SHA256 40c1b9a1c297746e02cd5614390adf6a51e9f0a024c77567a114eceb7a581895
MD5 3e49a405a533558fb4030d6fd74cc752
SHA1 28286d8d29687911deb9c049078bddfd36969579
SHA512 9951f2059ace7f1f47c67b8c3f0e10e3911b5156b3da172af8c9b70ca90ba1545e68788e800c09fe0859728bd18a976f304ceb99c50319d74b7e4fc4eb880075
SSDEEP 1536:ATgnSINAJrRJqerEKlFXhuX3saQdU3eZ/jkfJvkDIghmIQaFLa:AT+Z2fun0dUMkfRmmd5
TLSH
T10C63C7CAB6C275399BCB6074507F018AB27E9DA71448C478E62AC4F6383891D947BF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38cc101380f620c0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\38cc101380f620c0_0
Size 23KB
SHA256 d789b49161dc5d9b19672a8067d47acd085e9bb5c7e3bb95b825d6e8351b6aaf
MD5 b823875a7cda1f1eb240f040a92f82ab
SHA1 3c1396620e72d231acdf2fd8163795c3e9ac1284
SHA512 653cee59d52922ff06a93ecf102a08a9c10b766a4f24de6853441881c998ff3cae06de4ce9cb6a7ba1c150d1ec0080ab543a0119911c44c6952795c2ee5fd9b8
SSDEEP 384:3r/QWMFFdske2oAs2+7KHlhMP8Ftfe6nuybH:M9G2lHXHH
TLSH
T190B284FD9B806F64C5329BB0D1218A6225B14EACFDC6A70BB1B0D6652C4D1D10FB6C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c814eb70ee3f42e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3c814eb70ee3f42e_0
Size 239B
SHA256 4d0c7336195c32a219014ed037a1a1e856e8f53b290e8ae5835dab65ea98aa7e
MD5 579a0b9b899cde0ea709afb5943b85a7
SHA1 20d1048b958f85580aa4d636edfca0e5bb1f306f
SHA512 c979c46063a3b1f314aa458ba8bda406f89d44a9288e08f9268a2f998b88d106a27c232f3e9573565e4962c477a844675e79045d740240f069a8cbca81559c44
TLSH
T18CD0A7B3C83A3817D90914B5CB9FAD078E11C0D57888C051468A657FB79D671271A6E8
MD5 SHA1 SHA512 TLSH

Submit Download

3e66eeef61ac0718_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e66eeef61ac0718_0
Size 272B
SHA256 e2ec2c13cef0974138ea3d8eff44cf61fc1a3baa4a732b618bb75cd80268dd33
MD5 bc9deb63b1d1937c4612254a302fabf2
SHA1 859a2194046d348cd2a7df14022ad2f675ffe5ba
SHA512 fcc7ea3c0d4d42894c4ed6ba489a5ddafae3749159f8115136a08e73206d6e3414b9beac4c66f5bcebe23313fe2a323b19128a9ff6b11bd2f8a1b6ad81a6441a
TLSH
T186D02BB79B240C41D61A58F5A3995C4D8DE099901888E452504D65551E30CB6262B4A9
MD5 SHA1 SHA512 TLSH

Submit Download

46aef1ee2c802ddc_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\46aef1ee2c802ddc_0
Size 5KB
SHA256 a076e0035bef50e34ec2657af4eed046026ff1ffe15afb0a1a038ebcc6ec31cd
MD5 bc70d8f8678483e09813961776c8af7f
SHA1 097f901b7aa89d98b7f8657fb2be136ab606cee6
SHA512 d96f82e1a401d87d5751b3f0ba0003ac064e6dc8e9d656c5219cb90408d04640e14dc9ce251f3f85d6c8f7e9ec34576a50db868c37d90fac101d4840ac2620fa
SSDEEP 96:Nf7UGMti31xXw0amfR0q6EyS/O/zOJKasRQwb/KxY3OTv:NTLXX9J9UKJgWaSY3O
TLSH
T1C8C1D94272906D6ACDA36FFF8062C77A1765C4046A83D73E71D1B3501D291F21F9A8AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4770bd381cc5ea0b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4770bd381cc5ea0b_0
Size 24KB
SHA256 d880a652bb06919cd234c2d4270c9827a2c07cc7848d83b248289d25bb950d25
MD5 ef31be2d64cc5e16a5f3f95a137e9c63
SHA1 14ef7faf369236d24f86f6a2eb8b6836cedfa386
SHA512 bf299603fd6b7965bf26af94128544accd9bb2e4615a3240db74a530623fd97125d6fdcb2dcfe7c1b91f169a90ed3cc4a4e62b6b796ad708d193224406903100
SSDEEP 384:wuQShWC6nUM4Gzz6tfctYjHIyMCq+tCG8b6Ahs8ucKyexonUJ0Mo7fg/LX7Z86k3:wu5WCSUMP3IHbvjb8bk8uKwoUJ0Ngj4
TLSH
T126B24A4A6B56AE2BCEA753F15392C667B33280487FD2C32119E053311C962E65E8FD4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f2f3583351bbb94_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f2f3583351bbb94_0
Size 11KB
SHA256 956934fa22e39111ddddf01a68fcb7e5f5a04fbf512cce4ab8f69416f08106ee
MD5 c8e8c520a35480ec6833f28d72ecc3e2
SHA1 7840840851ef01ffcbf647c45f30edcdf9037b20
SHA512 1d106f81e148e18cd9e3a1a2ef11c51e6909df974b55264f3e319f24d10a571a1b8e213babd104cd42f50a84dff5030e404657ec45d4f8f2d8eae380cd5c6b5e
SSDEEP 192:c3kR89SEyhd0hsBMkp0qrGDMoOatWRjxcoM8mlQdDb15GlYF4C:j89SNd0q2kpXGQ24R9cumls12YFj
TLSH
T1BD32712D2BA04B6ACF7657F94292C91BB33205483ED3D347A1E663393C202E14F9B54E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6adfff33b75ba4d3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6adfff33b75ba4d3_0
Size 264B
SHA256 1960c2c03d456768e52c3755e168311788dec0fa8ad798c9c2911f41f5a22721
MD5 eeebc13a24d4f49def4314c7c2452295
SHA1 792e5314128490e9e7b5512652b8f5735913d95e
SHA512 ec06620d2b8067341e94fe69201734b566ce618c873a5a19bc77cfc74dab11764a9e60291c6289c9b25f376ea365141b880e09370d645abdb32d3de2e6ac6380
TLSH
T1CBD02EF7003E2D00EC0608B5CB6E284BEF51A0A53C44E162B95E82952A258322283868
MD5 SHA1 SHA512 TLSH

Submit Download

849f38aa880170ef_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\849f38aa880170ef_0
Size 51KB
SHA256 d6a8ab95b9fb54cd0220c203bcf4fc7539036cbd2a343145817f24320436c48b
MD5 ef77e8ca01e95e08fc85506893ba1c93
SHA1 81b19e92621d5be94c85fc3e4ff748d11d6ad392
SHA512 e0f21ef91cf0b2ece7db4a7f61b20955fd8ad4a2c7fdb7181d2fe71060c3763de2001a0843f93122f96fdc23ffffba4d293bb749580ec0d7e015a8709cec1a00
SSDEEP 768:81pYMkc+hZ8Y94yoT9C0wJSifZm38PFdGJiHpgDQ17wp5l5Rhfs5pfSZQZFmvZ54:81pYMchZB+o0wzzWHDQ17KHB6LFmvZ5
TLSH
T19533A6513784BC91CF7A57F101634A67B33249846EC29327B3E8F33A2D095E91E999CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9632a54db06bd19a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9632a54db06bd19a_0
Size 266B
SHA256 3b6d93d0c980aa7db4f11b325d3fd8606f4213d972618797b66de02e5683ba8f
MD5 5d4cda4c0b741879f170a61bfa1956bb
SHA1 8f89081389d343a705d0a6373de60a0d7ac1cfb6
SHA512 6ab6b2904e3c55c91bcb8527a53e29ceff34a939ab9b7ced93389c3978b9258b54b3f0c38c866a6adf4e4b2226d18258b881a084a0ce6c8a72c72e86951f4cb0
TLSH
T198D095B304149C05D83E04F1CFD78D855F9227363C88DA91B518D3620170472D6174D1
MD5 SHA1 SHA512 TLSH

Submit Download

9cc4994c9fe6e34c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9cc4994c9fe6e34c_0
Size 1KB
SHA256 a15169f19c451f9077f300fd1f5b7f68003fb141b675bd4de971adca30a3fcca
MD5 29228543543375a3cab752398f7660cc
SHA1 b5c5d332daf533d880f259e44f723468bd4c3b63
SHA512 cfcbc20dc060a2fb7e6453894a1f20ed130c05391a77cca111d8eab882b509cb7bae6212b9c5f3b8248e370cff18ae837cbf5a2151833a233f492a5e1755de8d
TLSH
T1EB3163A78B81EA31C93A25F18A56DFA9AB37914F3E8AD306206443341C475F2074B04F
MD5 SHA1 SHA512 TLSH

Submit Download

c99d9558c7647e63_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c99d9558c7647e63_0
Size 267B
SHA256 3cbc177c2ffd65c19f0314f3f795b1c0c7185dd3a522350363d953b0946221ca
MD5 3f1a64b18a99870381108ad686d4de60
SHA1 ff17f432c5a5d40c8710d29cc35f0d4c4402adb9
SHA512 6e25688f3fd1df89ae4c82b7bf5444e1f1b4fa70ffd7311ccaadee6cdc1f27daa019f217d7da60927ec707b38c6ca5f44af9606ce186f8155f10a6472aa08518
TLSH
T1B8D02BFF85141800CA0165B1DFE14D49AF51F155A96CE6554A8446071E225F256CA098
MD5 SHA1 SHA512 TLSH

Submit Download

dad5bd3a2ce96abd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dad5bd3a2ce96abd_0
Size 98KB
SHA256 68ddd74159ccb55b9d9539f56748ad307e0f33f7626f34781c0e8b59af6b3dab
MD5 aaf1839d4f4a340bccda04ce9ec8f0f1
SHA1 a649f56989110a78e05994661bb5054e7489eceb
SHA512 287b984bea6de4f6f11cc20e0dbe9213838f14f0c3850284fbc7692921563f6c8a4bf5ccbd2d01ae5f11cb8add1cb1b2caaff60ac8e954169be5ebf709c1c9a7
SSDEEP 3072:D8n9uboDrbe7R7PfFTGhPsjA1OYODuw7HfIcvMTVTIfrvhfUjcDQAfnfnDUdxLxb:In9Bhg8ZHIS
TLSH
T10AA3E9B8AB40FC2DC96967F64103CD27773E40087EA7D30732A9E2351D4E7D91E65A89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd4546cf427d16f0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dd4546cf427d16f0_0
Size 126KB
SHA256 69e7150a2b9f20c79572861ba4013ef62a75a148bd536de51f10bc7d667c0086
MD5 b733d93d9dca0152f1b287ac9d4951c7
SHA1 e55d7588c06e505d723d291bf68d8133ee56ecd0
SHA512 740f6a3e2d5dba0adf832c930580e998a137eed82d8d7ee8490f3c81c9aef1e839d17f32a75e69067719ea1fa3ca58e5a8c1e5ad9334f2fbbc5f5b469b71d8c8
SSDEEP 1536:YXR5eRPKatbwE3R0DVu6X5XkjeZd21EZVSWy0EW2MnHomPL8a/+QA/Vl25UR:SIxJwE3R80IFAJW2MnHrPJr5
TLSH
T1F4C3F8256F60AC95CA3257F141738C17B73384487FC3DB2F66A863362C1D6EA1E9A44B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df2b1bb5ec463519_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df2b1bb5ec463519_0
Size 1KB
SHA256 454129428cd8328404c0ba37c325f6316e2de96f10c751bc51b4b3ab16bef954
MD5 bda1855b564dcb5ef4dd545dfb088716
SHA1 a590cf760a9d22c4fd89b68661f807d411a5c48a
SHA512 cd3e6d5a4728ad154221d0cfd5cfe9f17388fb18de8a93047c75f891434ad017b62bc2b8f49407eab82cb4fd3bc4f8f37c5a44f89aedbdd065f57de3b392c41c
TLSH
T1FD214062D7582A03CF2906FA93E985B6B777614A7B46E10A5288133D3C556B32A4E0CC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 92c12d2e420c54b153ae984b3ded7319e6966068e45dcaefa22ae45f65c93479
MD5 021bbf87d27ba5766fb21fc300725af0
SHA1 2d48d90a429a4155e98df5468828875e60d8e7c5
SHA512 5e6205d6178d3f031e66ac64241ffacb151f71aabcba99e860d8db5aca9fd83c87fe8660ff2806828e34f0478b4f837ee7e9489f5657eba0db4bc13eae346c4b
TLSH
T13D219DF3C3E8567D8D5542F466243F1BCE2D0C54431C3D5AC9D4AB5B93E5471E28095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2f352a5e915e1b7ff8b1f96520a7ccab0986523f9417a0670bcb4dad5acb51c5
MD5 b7266739d9dd477448d806dde25f3ff0
SHA1 2c3f4f73421a56e778ad364fc8b7fa7ce45aeecf
SHA512 4e129a240ea0f8085d2a4a5dbd529458f7e7f381507c36f295d02d8f1c83207548bb883f924d0f6ae57af6ea5f8674fc9648424ca27521c78ed183f5466da4a5
TLSH
T1395180F783F4856E8E0195F0AA18AE2FCF2C0521435C7D6A85E4AE2793F3561E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b43315c77aa25a9bc2d72ed856b68b7233929ada82c7acfe15ecf5fe25985e72
MD5 7ddc4bf646ad7c3d45caf566690db725
SHA1 caf8c87f12279bd4164f1eafbd5c5c05491ec505
SHA512 8ff9199a5ffec4049974643903bacd8eeb4d50ee8362e04e9a371022961c0bb29c5f96ba42bf1089d3d958d77a730575063311bb1e8675cb78f50978d531cf8a
SSDEEP 192:sxRtRvCJ/fqspJEZ2MdzoD8pPN/g6+WNZWF/YGvbbUP3GtIgVOJ:sxRtwJ/fqspJ6551/5G/WPEg
TLSH
T1C142C9567924A93B4CC7E21DBA59BF53D7F95132A1942E48BEFC8A0C04EBADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6d0e2653a1ac56c72453f469aabf224547b76cd1fad566c93ec330bc6426c960
MD5 a7174b4553f70606a6692be6c6449c75
SHA1 042a86618f0bca844fe7720c37d001b4aa5ee013
SHA512 ba0670282f595d98631c6a9c4317a1cdf33743c7f89629146d30d34059aeca227e8ab55897dc6df41b0693c39bf1c92fce4e57d4443726b6aeefa4fc5c2405bc
SSDEEP 192:sxRKRvCJ/fqs/JEZ2rdzoD8pPB/g6+WNZVGjfYGVfbbUP3GtIgDhOJ:sxRKwJ/fqs/J6O5p/5bGffkPEA
TLSH
T15542C8557924A93B4CCBE21DBA59BF53D7F95132A1942E48BEFC8A0C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8c4cedebcf15cce20a506f56a840fb1dbfbbff7926c43f1f2485bb90636aad46
MD5 2694a2bac85f387d36bd44c612b9de44
SHA1 3d6f247ce9b0bbf61e89046d1b919c1279141dbe
SHA512 fc3c0476fd1de9f189b517615931929dfc520870b5e6be63e959c101934dbae1de0ab26e2471a647243278d39dc842f91e044cb57baa203a56dd62cc5be35dc9
SSDEEP 192:sxRKRvCJ/fqs/LEZ2FdzoD8pP5/g6+WNZNjZYGkJUP3GtIgDLOJ:sxRKwJ/fqs/L645R/5/ZrPEy
TLSH
T17D42C8557924A93B5CC7E20DBA55BF53E7F95132A1942E48BBFC8A0C05EBBDD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 367033b9522721ea9ff7835aa2b7705db1af2141154cdb1c0991743e5384d9e2
MD5 ba0f02ba95f577a187eef25add2b8f00
SHA1 5b8999ddd4f9aebdb2bc81c158340915cf6efc9a
SHA512 145022cdc80e946664e3f192b94f854c78cf66fd27afac30f06569f5156a1f655605251d3c4ae3cc265547250959bc852061c30b9bf3b5206df68084789cbaba
SSDEEP 192:sxRKRvCJ/fqs/LEZ23dzoD8ptk/g6+WNZ5+hYGgJUe3GtIgDLOJ:sxRKwJ/fqs/L6c5G/5WhneEy
TLSH
T12642DA56B924A93B5CC7E20DBA55BF53E3F95132A1942E48BFFC861C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 94d2307568a092a8d0c522a1f2b95cafa6856cdbd7654704ab3901769f15d4ec
MD5 1c5912cea13c53730ea87e53dc43539b
SHA1 49e36172e0e3b9a5ce39249e5cce931d7e838bc2
SHA512 f12d3289ccb1bbd7573a7dbf239331eb4fc82c62846b384c1eedfa4dc0547dd9485531187830fae4e59c3dd57ec12b40dd7c40f119ae2ebc938453263085994a
SSDEEP 768:UQYi537pLuL78NWgv7fxJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4H5pNKGroj:UQYi5xE78NWgv7fxJu1jarH5fK9j
TLSH
T12AD2DB7B740CCA7F4F804A9DAD197A9F6DA802CB9698CD8047FE941C02C6BFB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d43c5c599bff64d0fdc85fac79bc2a859d6f5276b5fb56f64bc76ce0a3822e16
MD5 b9d1b00cd0706f5ddff82d25603fba4d
SHA1 a97008a0a06ea6722144a263e645236b3054734a
SHA512 78c3f46296044be74e08cad98d6598c92d6234a4c48910569d15eabdce7ce15ec83efebe270f3726a0630b573fa442e53179b7f69562e8d7096513c99e5a0a7a
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkgRkQiOCYWm7LgYYK49gKYcY4rKQ1H/oNJ/9A:Cm7KmgIIJ4tWGm7g09OGlkgRkQiOCPmg
TLSH
T1D4910605727B0240387DAA0D85B9885F92C2B4663514A52F7BED52B21F66F03ADFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a43ff.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a43ff.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0dab8791f6fa63962b18d2b3aa6369d2551c48d1cccecafe97f391913044e7fb
MD5 3f0fe3977ce220d0f917201965b82442
SHA1 1ac6600fdb60d181783f13a9d66006ecaf5cf4a2
SHA512 4564e0bbbe2c445d2ecdc2537795e173db9c205fc4f6d4c3332dbc20f839ab8703ce119d42bb521b2f6957265a004eadad1035b41ac30851ac22da6413f029e3
SSDEEP 768:xGrv+4UNbdS3K81lYy297Hucys6BRvi82oP4/z6himo+6v2bwn+h:xGbsbw3KS3imOz6Imonv0w+
TLSH
T17503CF31E4548D72DDF78288B14A7A933FF4522345C91AC0E6DE6B0E029B95E631BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 38233b1af5d7549b283e872de950770c4746e36cf140ba733beb7587d2de15b5
MD5 acbb04f9e6d6dc53bb41a292cc1986b1
SHA1 9f21a3f029ac4bc58d90fa5e58761a039b100ea9
SHA512 2ed2d2d98861c85d2d16e971711418c3caace9867abc98d6ca95bde798eecb0eb7c13ca022eb475a31bdb08757ce9d6ef8aa7f7a85f0d492e1d6c75c879c29f0
SSDEEP 768:Prv+4UNbdS3EZlYy2iEgz7Hucys6BRvi82oP4/z6himof92bwn+h:Pbsbw3UEF3imOz6Imo10w+
TLSH
T11303BF31E4189D32EDEBD188B4467B937FF4127345895A90E6DA6B4E0187A5E231BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f40bd1f249503e25102342e95c90848cf0ef9fdd6fea04ce940bb8add12915ad
MD5 e74b2fe34090d53ce68ddc99c29622f9
SHA1 3451157d0749e2d364ef7ce9b55dbb4b3c548c23
SHA512 dc2d5316e1830be9b6e8a0fc1413a8ea5d94d2ec3d089bc75962c5ca07d61dac7174e27cc9397596aef018710354b63c7e16d350c21b4b4e32afd1a0cb5f8f42
SSDEEP 768:U3IzhA3x7lYy2iEg77Hucys6BRvi82oP4/z6himo69TX9m6yMCE:U3IO3JEX3imOz6ImoCxm6VCE
TLSH
T136F2C074F8508E76ECA79288A54B3793BFD01337448C2E54E9EAAB0E15C769E131F812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e78c57ad2b443198d3f010466781064ba3ebd2c96848ba9d2dcf0d4373b66b73
MD5 40dff70f6a7558e9390f349a2f8f2921
SHA1 8b87fb2b7062ef33a173a999feaec8dbdd1de248
SHA512 a496de6188e9a5b492e201541bbdf066c2ee66d7277665182833b443770d07cef05bedb537cec56fe84109383b260b63ea7ca75b0cef9eab04541b26069d9360
SSDEEP 768:Z3IzhA38XlYy2iEg77Hucys6BRvi82oP4/z6himo69TX9m6yMCE:Z3IO36EX3imOz6ImoCxm6VCE
TLSH
T1F6F2C074F8508E76ECA79288B54B3793BFD01337448C2D54E9EAAB0E15C769E171F812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 da981cd3062155945859cd88e525aabd4fe19e6670759165d3d6c0a8f04204f4
MD5 bb3effc3e1af2e22ba8914384f01369a
SHA1 c331437eeee62f089a455be4d0e893111bd10069
SHA512 4c546efff226761d18654a76286bfde29b10c75de13805d74f5d56a5117631a8aab28318d1ad32b05e6502a13ec16d83f27a8e9b484eee464f4475123f860584
SSDEEP 768:brv+4UNbdI317lYy2iEg77Hucys6BRvi82oP4/z6himo69P0Sh:bbsb63VEX3imOz6ImoCh
TLSH
T1B503AF30F4589D73DDF79288B54A3B937FE4223744885E94E9DAAB4D0187A9E131F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 91ba392ec1363fbecca9e58ec2475dde9cee6b3ce16881fc677a274b52a7b6df
MD5 e2172384e1fe5cba1be6bea0969e354e
SHA1 1a5d0d75a87f2027170a0473fd606d5d5f3e8967
SHA512 726ce728aa4ee1b2d5923424a3f72c23531e92b821709c3aeba469070cc6628e9ce9cb45671c3a7bee853f3329b2efb3bacdef88962b6a5b1ddb62211cbadbf4
SSDEEP 768:UFZ3Izhi3IwgAWy6iEgg7Hucys6BRvi82oP4/z6himo69TX9m6yMCE:q3I43XEG3imOz6ImoCxm6VCE
TLSH
T1DD038D75E890CE6BECE79385A64A7697EED01273448CADD4EADA6F0D10C76DE030BC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

5273e569-1749-4c90-a778-57cf845f51fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5273e569-1749-4c90-a778-57cf845f51fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3656_204155848\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download