1d3cf0b51eb0146a085495d67553ba5ebbcace5606b2950bad9bcc735521d117

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
luna-executor/RageInject.exe
Size 3.0MB
Sample260818-phex3asara
SHA256 1d3cf0b51eb0146a085495d67553ba5ebbcace5606b2950bad9bcc735521d117
MD5 5e5841377b4be7a523880e244fdcbb27
SHA1 140fe4ae56bd22ae4ad02b2f67afff6a2aa0d325
SHA512 78624d9be2b2b571825442d9aee1f58a6a3ad9d8c161aae083d292bbbc22978af37605160ff64c26883269904b54976ffe6c6156b0892bdebb233a19fa75a692
SSDEEP 6144:jiZIj3NqHErkSJkiwCpFOzAAbzE0Ho4itU9eIwlDobcv+0WxwC0JW3by+V0ogcK7:jZj3NOErvqit0HXzvCywz+yyE
TLSH
T125E5A1D63A69C9AFD3B3A7B74494E23106F81C446732C61A4EF0EA83FC525452F769E0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1720_2069404\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1720_403911782\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1720_403911782\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4324	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315291884026346"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{2D015BA8-8391-415A-8BCB-4D0D72964CF6}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 42 IoCs

pid	Process
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1720	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3060 wrote to memory of 1720	3060	RageInject.exe	88
PID 1720 wrote to memory of 2900	1720	msedge.exe	89
PID 1720 wrote to memory of 6032	1720	msedge.exe	90
PID 1720 wrote to memory of 4324	1720	msedge.exe	91
PID 1720 wrote to memory of 6032	1720	msedge.exe	90
PID 1720 wrote to memory of 6032	1720	msedge.exe	90
PID 1720 wrote to memory of 4596	1720	msedge.exe	92
PID 1720 wrote to memory of 4596	1720	msedge.exe	92
PID 1720 wrote to memory of 5964	1720	msedge.exe	93
PID 1720 wrote to memory of 2364	1720	msedge.exe	94
PID 1720 wrote to memory of 5964	1720	msedge.exe	93
PID 1720 wrote to memory of 5964	1720	msedge.exe	93
PID 1720 wrote to memory of 2364	1720	msedge.exe	94
PID 1720 wrote to memory of 2364	1720	msedge.exe	94
PID 1720 wrote to memory of 2260	1720	msedge.exe	97
PID 1720 wrote to memory of 1988	1720	msedge.exe	96
PID 1720 wrote to memory of 2260	1720	msedge.exe	97
PID 1720 wrote to memory of 2260	1720	msedge.exe	97
PID 1720 wrote to memory of 1988	1720	msedge.exe	96
PID 1720 wrote to memory of 1988	1720	msedge.exe	96
PID 1720 wrote to memory of 4112	1720	msedge.exe	98
PID 1720 wrote to memory of 4112	1720	msedge.exe	98
PID 1720 wrote to memory of 4504	1720	msedge.exe	100
PID 1720 wrote to memory of 4504	1720	msedge.exe	100
PID 1720 wrote to memory of 2492	1720	msedge.exe	101
PID 1720 wrote to memory of 2492	1720	msedge.exe	101
PID 1720 wrote to memory of 2936	1720	msedge.exe	103
PID 1720 wrote to memory of 2496	1720	msedge.exe	104
PID 1720 wrote to memory of 2496	1720	msedge.exe	104
PID 1720 wrote to memory of 1916	1720	msedge.exe	105
PID 1720 wrote to memory of 1916	1720	msedge.exe	105
PID 1720 wrote to memory of 1916	1720	msedge.exe	105
PID 1720 wrote to memory of 4268	1720	msedge.exe	108
PID 1720 wrote to memory of 4268	1720	msedge.exe	108
PID 3060 wrote to memory of 1564	3060	RageInject.exe	110
PID 1720 wrote to memory of 4304	1720	msedge.exe	111
PID 1720 wrote to memory of 4304	1720	msedge.exe	111
PID 1720 wrote to memory of 4304	1720	msedge.exe	111
PID 1720 wrote to memory of 1828	1720	msedge.exe	112
PID 1720 wrote to memory of 1828	1720	msedge.exe	112
PID 1720 wrote to memory of 1828	1720	msedge.exe	112
PID 1720 wrote to memory of 3424	1720	msedge.exe	113
PID 1720 wrote to memory of 3424	1720	msedge.exe	113
PID 1720 wrote to memory of 3424	1720	msedge.exe	113
PID 3060 wrote to memory of 556	3060	RageInject.exe	114
PID 1720 wrote to memory of 464	1720	msedge.exe	115
PID 1720 wrote to memory of 464	1720	msedge.exe	115
PID 1720 wrote to memory of 464	1720	msedge.exe	115
PID 1720 wrote to memory of 3848	1720	msedge.exe	116
PID 1720 wrote to memory of 3848	1720	msedge.exe	116
PID 1720 wrote to memory of 3848	1720	msedge.exe	116
PID 3060 wrote to memory of 4452	3060	RageInject.exe	117
PID 1720 wrote to memory of 4700	1720	msedge.exe	118
PID 1720 wrote to memory of 4700	1720	msedge.exe	118
PID 1720 wrote to memory of 4700	1720	msedge.exe	118
PID 1720 wrote to memory of 4292	1720	msedge.exe	119
PID 1720 wrote to memory of 4292	1720	msedge.exe	119
PID 1720 wrote to memory of 4292	1720	msedge.exe	119
PID 3060 wrote to memory of 1704	3060	RageInject.exe	121
PID 1720 wrote to memory of 2732	1720	msedge.exe	122
PID 1720 wrote to memory of 2732	1720	msedge.exe	122
PID 1720 wrote to memory of 2732	1720	msedge.exe	122
PID 1720 wrote to memory of 628	1720	msedge.exe	123
PID 1720 wrote to memory of 628	1720	msedge.exe	123

C:\Users\Admin\AppData\Local\Temp\luna-executor\RageInject.exe
"C:\Users\Admin\AppData\Local\Temp\luna-executor\RageInject.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ffa31a2c188,0x7ffa31a2c194,0x7ffa31a2c1a0
    3⤵
    PID:2900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,3641164590779061369,5148926661654781597,262144 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2
    3⤵
    PID:6032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,5549470147894571441,8257887936101814468,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,15312326189208335840,17701076743534071816,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:13
    3⤵
    PID:4596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,6316486591268948417,7104048862860697832,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
    3⤵
    PID:5964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,14278318323522246557,8539038972294052031,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:2364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,12080178997006374283,18055343097847679329,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
    3⤵
    PID:1988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,11166336064116587230,13579647873299204698,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:1
    3⤵
    PID:2260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,2176983830869587397,7773634161749629201,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
    3⤵
    PID:4112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,12067582006873380436,17986082887524101528,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
    3⤵
    PID:4504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,4678757259457254751,1578539420731357748,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
    3⤵
    PID:2492
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,5021426699948692923,17496140624847078405,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
    3⤵
    PID:1816
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,5021426699948692923,17496140624847078405,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
    3⤵
    PID:2936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,1793041358360765569,7143646960610110795,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
    3⤵
    PID:2496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6384,i,692905891726073642,16794536104619508553,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
    3⤵
    PID:1916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,7058814162165186087,14838337210619399186,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:14
    3⤵
    PID:4268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6820,i,15063002911311655248,16692305923556135255,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
    3⤵
    PID:4304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6416,i,13719875170811656843,9493806852821719647,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
    3⤵
    PID:1828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7020,i,1759975064897076095,17747542800427696975,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
    3⤵
    PID:3424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6892,i,13262922160789863074,12886643287052235938,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:1
    3⤵
    PID:464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4144,i,13160167362898894368,7948843391955179120,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=7484 /prefetch:1
    3⤵
    PID:3848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6840,i,4285831810238199760,17544587697896303461,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1
    3⤵
    PID:4700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7728,i,7271172293531142799,103679003011727625,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:1
    3⤵
    PID:4292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7640,i,12990894723372326963,15715763903957188396,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7456,i,7486447560574434090,9783108657515001163,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=7196 /prefetch:1
    3⤵
    PID:628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,3591406655814967021,6577271730717992089,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:14
    3⤵
    PID:3112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,11421602475051002848,8532193090497359318,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
    3⤵
    PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7672,i,7236554366604601157,17074381762521092348,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:14
    3⤵
    PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4092,i,8932474637015141450,12885641683124614988,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:1
    3⤵
    PID:1156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7440,i,12282851093592100771,3762937720976501477,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:1
    3⤵
    PID:296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7752,i,1124991235716854767,5301620729481022344,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
    3⤵
    PID:4920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6116,i,17111212567657597470,916439056808300656,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:1
    3⤵
    PID:5932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6084,i,12495424884364803943,13215307484320998384,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:1
    3⤵
    PID:1060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=4980,i,4085925845438982576,14162677362263464541,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:1
    3⤵
    PID:252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=2112,i,7501195535882868373,1307906884469678359,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
    3⤵
    PID:3464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8200,i,4319832683650064936,5585773014644260136,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=8248 /prefetch:1
    3⤵
    PID:5748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8220,i,11471912595831102978,12329862203659507568,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
    3⤵
    PID:5216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8464,i,17308526017741893733,1494985185783716206,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=8480 /prefetch:1
    3⤵
    PID:4168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8632,i,8834430253951204173,235682348534281942,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=8628 /prefetch:14
    3⤵
    PID:3052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6252,i,3342930104230848346,14570053011372662967,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=8852 /prefetch:1
    3⤵
    PID:4972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8132,i,148500162358818431,3239430040293492797,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=8960 /prefetch:1
    3⤵
    PID:1672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8168,i,15990643194310606768,5616479717194476655,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=8148 /prefetch:1
    3⤵
    PID:3240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9024,i,10425333631582837615,1277870295254218533,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9080 /prefetch:1
    3⤵
    PID:5624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9064,i,7158803201997625769,2779352649432780499,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9028 /prefetch:14
    3⤵
    PID:3216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=6900,i,4408062823754852891,14903824586631642538,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
    3⤵
    PID:2776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8140,i,6378037189540354593,1385880041080599587,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9436 /prefetch:1
    3⤵
    PID:6248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8992,i,8638605780155328994,7443283306058172252,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9360 /prefetch:1
    3⤵
    PID:6464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9548,i,10100633399768443020,16836306093547233860,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9204 /prefetch:1
    3⤵
    PID:6728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8868,i,11667006861185968568,10656099016691229415,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=8252 /prefetch:1
    3⤵
    PID:6896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8496,i,9732930742542555358,14367214141278538966,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9072 /prefetch:14
    3⤵
    PID:7152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9664,i,14220741162566528288,3887690655297981131,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9016 /prefetch:1
    3⤵
    PID:4468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=6248,i,17739206456767500703,120205742554846282,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9416 /prefetch:1
    3⤵
    PID:6244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9756,i,6895848738356361661,16660444112899785107,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9760 /prefetch:1
    3⤵
    PID:6420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9920,i,8263556563877652870,16781575173329346246,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=9324 /prefetch:1
    3⤵
    PID:6588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8868,i,12644042630487589944,14888457875576584478,524288 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=10024 /prefetch:14
    3⤵
    PID:6508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=10200,i,7923252017592049851,15647370542081033566,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=10224 /prefetch:1
    3⤵
    PID:6464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7660,i,7665064095381512281,2087500307827777762,262144 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=10248 /prefetch:10
    3⤵
    PID:6920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10360,i,903896362669497300,4573278254185077223,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=10436 /prefetch:1
    3⤵
    PID:7052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=5572,i,7164208702350410158,1632057764461818639,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:1
    3⤵
    PID:6224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10356,i,17895427667274787187,16850614911021472086,2097152 --field-trial-handle=1896,i,17467096743660143211,4173618539288025797,262144 --variations-seed-version --mojo-platform-channel-handle=1196 /prefetch:1
    3⤵
    PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:6816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:7040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:7156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://anonym.ninja/download/GtK5RuLsd8k3AN6
  2⤵
  PID:4676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4444

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2764

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 42KB
SHA256 f0b38922fdf9c0ac73f78bf071a639d8c1cf7e81789a4545b00f2010cdd33197
MD5 def455c743bf7aa48b2f6a1aaeab36db
SHA1 b9f5549b1f61bcc7f477973bece15870cdeddb83
SHA512 a8b0adc7bc90a3131c102e3dd9d96a05f3acc713493393036697bf0d75baaa5d36b089a7f32d9ae8a9ca3a6d10df706263670598877c4b79c86cb6c197a53337
SSDEEP 768:MQh9TUW//tToxCEvat+59X5Pfnty4bB5b3FTyUynWM3VEfwVRKxY2penBVvk6KRm:Vh9p/t0tCtQz3Z15RLL8bWY2penrMnBG
TLSH
T1F313F169A80E2528F68E5B580130CD9F79B9D701F4E3352BE645ECB3B4AF07B84B05B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 21KB
SHA256 a20c7317c68e136b8fb60dc720307823ad49d5418d4710ea05a2137284580306
MD5 1dceec81146ba156dc8c0f4c15d051b7
SHA1 ba4b8c8c9b771f528ee6964dc77e942a8ececbd2
SHA512 4821b474968f0660b3cc2b2c02d758839ce58928577157a1dc62c0f2edeaf13d0c25443dcc75dcbf92836e95d870d33778dfb008722bf585598fd00110c9b85f
SSDEEP 384:RPniwNLvobQ6TzYK62vGm9VntEr+CYnsbb2EhYSPfBabpInwy:Gk6TzYKf1tbFW2EhYSxaVawy
TLSH
T14BA2E065B32173D0ACB973931AE72150FA0E6DBF1400CFAE47E3F69499FD1626428E19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 30KB
SHA256 276b50639b3e8fbe4b4459513ecb68ab82973b84d49b6db67b4688df36ca559c
MD5 8662c673de81c12dca4d43967e6ea48d
SHA1 d51f4e8cbd8a05224bbd685d29adcd3b5d59821f
SHA512 db80523abc5e9a908905f2d74b4f954047ea17966744ca46de9a798b585e7c36f4e53465e302cadedf1005a53d97bc261ee0c48faf338e46acf7cb5c4b5725c5
SSDEEP 768:LsAmJTKwYe553dX668JDy6CngqNLTLuoO5hB25FwW:uJWwx5j66gD7CnXNA+
TLSH
T1A8D2012A13F4D64487945E723A3ED3100CC21FC79DF2E1518D91E1B0B1FDC2A1AA39A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 55KB
SHA256 07633094480b1c88ca2b0441ec1ae6d7b0467dfd8ca6bd1fe7a48322a4d383c4
MD5 25ace33931f40eabb0fd7e1f5c7ec8b7
SHA1 97604c45f658788e3fe4b377e8e21b45c47983e0
SHA512 407d615401de273f949bde4bf0dde568fabb23cd673c16eb9cd818086d0d3b0278f8eb50c2451abb6eb7b455c7fb7fd15e066762dbf91a94bee1a029d8c05825
SSDEEP 1536:ZMHBPqBnH0f+IEAiHOVbb3cHvrYEgYCJ0hY3WxrX4Zpj3E:ZMHoBerbb34jYEgYC+hYzZxE
TLSH
T1A84302D276D639A174A4DCC514281327CFE74B0EB4C8AEE2E54CAFB7E720171C48AA5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 22KB
SHA256 d30e9262d7e349219dffd4dd102bf90643c4a824ae047c8c5dd9c18bb25c067a
MD5 3c42da6dd93995be519eebc3c422ccfd
SHA1 4254d474a52da03af735c3cfef6009d3a5be73fe
SHA512 7e362ac888fdead65345c46ac4f60b127cf276a4263ccc1d6795bf29c72b6c9a80666b53eaf33061cc933fbc621d869d2d4b7550acc898c6daa7755b06774449
SSDEEP 384:uB1tzUHYlOX1Ygc9WrCZMmbrhINughJLUkpU9XHriwoZIwmDaS8K/QOf9dS:2zIYlq0q8NnhI9nUywoZI0S8K/QOldS
TLSH
T152A2E115876F7B7779BA5B128F138FF65E50DA2DE04DA4785CD580A33710380CB2AD89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 158KB
SHA256 0c43a3ef2b8fd2de0701a0e5ebce3179952bbb2604d5ce3e5fa9f4bba8df1841
MD5 041905a88ee9d7ef084e9380d6fdee33
SHA1 12d3e26c262b8dd0a456699b4fc4cd79dbba316d
SHA512 170d553cfcbadd746fb3085f6121cbe39d4bd68dc6c55e9caaf73aa6f694f1e86169ada26155f4c5d605a48cd3346cbcdba176969e7220b6a4ff58139971f55b
SSDEEP 3072:NvcXqKj+ExYolCfhFoZEG9emDJE03kTwyX98GFVuFybqsNOJ/+:NvcXqKiEmolCf8EiE05yXqGWFybd
TLSH
T1E2F312F64E72DD023D089322F5C9E9592290A1CA9EED0356C88BE5847E3B8F119F5C6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 161KB
SHA256 fe3f0b25fb6798434b0b69f9163352aa26bb21b11da03fa52e4feec78d091ca5
MD5 ef4069afc55addc3cda7f665ff16060a
SHA1 913c24a566d005707947645c91313cd2a64d3484
SHA512 5df836626085d0447f0e7551d1f828b021d40c55caba1d8c34bc10ae6254dabe7e7524055c8722c780ccf29d70ef81eea9d2b40848f08af1d7ba757fbb51c8b0
SSDEEP 3072:ecvDk+ObWiewTXJ9tsmkJH2TH2g8FVu8DuFSpQyOZN81uUl3jUwqRw18NwBCfLi:ec7DOWiF9vkJH2TH2NF0RZNk1jww1FBf
TLSH
T1DEF312C5376F214A53A9E21876073E5DD605F9303D0F466B52F929FAAB0A8D0B578CA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 47KB
SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
MD5 260c81a4759baf163c025001c4f27872
SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
TLSH
T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 21KB
SHA256 51dbc4368601ad50a560b8030ba26e486013f5179dcaae33d6fbe889ffab407d
MD5 f6b1ed34676cb85b54e58e4a59ad408b
SHA1 5b114d5913984728777ba8c699ca6d7e558592be
SHA512 4f47e362e7882a99bd250e162419781f4e9f0decd58064ffabd3432935fbee5b87ed33d291db8bd9f894501a9b3efdfbad04355bf9f3d02e003584356959191d
SSDEEP 384:fnv4h03Xvxzp9WCyKUh3ciWci9bBTxHGaMFdXCzUJOyxcUJrrhE53Py:fnv4h0vxFRyKg3c64BTxHGaSdXCOzJrl
TLSH
T1E5A2E034678A50648DCA1DA3A082CC6237A8FE945BE3C0F0545FC585EE9205FFB94DE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13bb8a7a4dc8241f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\13bb8a7a4dc8241f_0
Size 305B
SHA256 dfe88b69e77f5d3610248dd0084c7c30057d41e30e2b3ded307b5677912d0239
MD5 5c206d6e3e7d6f36e08fb28d15a89990
SHA1 90f99a3e4d1395f50a9234e551cfc93a26490c58
SHA512 b1cfe27fe2ba7178e3efea89a276aa3189cfff741f3f8aeeeb1be6b55d260abd93b611231d79b2f3443360ca068e8049063b362dbd94d2e50eab556f10458a73
TLSH
T185E0EBB3A8653C10FE2AADB8BE45514C8233807006CF4229C40E7CB6130ACA1898218B
MD5 SHA1 SHA512 TLSH

Submit Download

2869553022642664_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2869553022642664_0
Size 258B
SHA256 dc01c3e737287394967f1f52bed5bf48def42bdcf2f63ca29046573e3ad204b4
MD5 b441e2ee3cb4345f932342410eb1836b
SHA1 ce8388f8509276115a0dfe6c228008b530491002
SHA512 f796ea67aa06c6ba46c32d02c85e21dee59cb2debb12c523f4d93329419288bb76fce086613592291097ecc2ec71820837f28c5e27c63a163e165e93702c32e8
TLSH
T125D0979B09483000D22E82F6C2BB834CC2B218328B6C4280000D92E38B532B092DC0AE
MD5 SHA1 SHA512 TLSH

Submit Download

36721cb4318c1337_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\36721cb4318c1337_0
Size 704KB
SHA256 1ab22e0c5b1906fee8e725e92a4bc2f68f898bdc6592a74288cf6f16298f6c36
MD5 432bddac7d0415fef4f7585289881ad4
SHA1 03dc56c601ae8a6d74c6d1420c9f51d085a671d1
SHA512 074981d800e0292c6d2778792fd85b8300967796096755f059fc11e1c0678087a3d1b77ebe605f4c70687a5d0245e18bdb2b3cf201484e0b7695ab9474af4553
SSDEEP 12288:JNCO6Yu7py1/nquNYMpSckagh2/WX0kmZrzRyxbnleX:JSh0Smn0tph2/p
TLSH
T194E4B500DF91BF35CBF657B542D3C527713A415E2E93914352A0AA2A2C1E2EE6E97C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e53143c14e6a9b3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e53143c14e6a9b3_0
Size 615KB
SHA256 646a8193ab73878c8897d14d754f3c587143dbde6fcabbcab49cdd0e8f6ab5a6
MD5 5ead52e1031f68eb134483378cf6f971
SHA1 aa96bce32a5ee4f14448f0bc36acc7289533d63b
SHA512 8d60fff8c430ad60656909d82e895945e5e7c51a074a7317950a4bb3e7b52e7cf129c022180a59ed0e77ec171948006aefa8bb2fdc5ca316e3ca26997d7be233
SSDEEP 12288:a/JAv7B4uDVsNBloTmaHQpZE+KEsi2Ao:amT1VQ/K
TLSH
T1D3D49585D7C5FF99CB2663FD0652C9673230449E2EC3E32763E0EB292C561EA0D49D4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

443939f6760a9ce7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\443939f6760a9ce7_0
Size 58KB
SHA256 cfe4e72db0f748d8aefe54eb96c2c444238e208830ca04702cd810782704ec3c
MD5 d0ec02456ac2bcf245772f37cd860a7f
SHA1 0d1dfc43de367efac434f3f974d0220efa445c01
SHA512 1c9b8ab70da79ef9f0c73455ae765dc4ddc3cd8f7c944b319ab2afd915d8b8e3946cc7065f0379baad73a88568ec9426edcb1a00937d5440a0ffcff01a26a79d
SSDEEP 1536:aCcxcLU4c/cAnisnI/cLWe5jXER4sD6m:m4c3jIeW4
TLSH
T1E2431ACFB1D27731C8E221F2506B950B53BFA15A5C58085EB901F6F12EB0987A47EF28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f35b69abfa65bb3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4f35b69abfa65bb3_0
Size 265B
SHA256 e17a573b8e6f1374e64a94f27b3b0273eed2419c81e77cde4d66e86e370a95dc
MD5 9acc795173030a1e0057731d85b77dc4
SHA1 5bd7b304d5d4ff21dc76b28a5e65d7c1a98839e8
SHA512 0f2b61f65be2eabb1e68731203b78e6fcfdd19b00e9d2c464dd212486f2147e61da8f94db69d76b2070df7e7140be06c62451b22264da84def1b8cb00ae37b5b
TLSH
T1ECD05EDB46285C2AF5AE04F6DAB719C889B295D50F3E8219A009D2629C20BA44A45A95
MD5 SHA1 SHA512 TLSH

Submit Download

5544cb8c51e76564_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5544cb8c51e76564_0
Size 2KB
SHA256 85859f29fcbd415ff1fba8a38c2ee747a3833a7cddb7f898fc004d8270779022
MD5 3ab77226121321e9c4e4d98bce80ab84
SHA1 aab412d4f40a2977f00eb11a4d456704a3e62dfa
SHA512 7fec50e01f638f7bfa900dc42aa39d44029a11da8959a74d4daa2179d8703e9d321547c78b105b1ea5dc2c7b8f88f29dcd1b27ff8b4d22382e3664005e5e1ec9
TLSH
T1805183239F185581DA5576F67596C3239B33C028EFABC7273362F2699C252D02F850CB
MD5 SHA1 SHA512 TLSH

Submit Download

70896ef5f7627a89_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70896ef5f7627a89_0
Size 244B
SHA256 bbd8ef4eb8d9063d86d8e9a376edaa52dd953da74978de0bfbe1fa0b9ac120d4
MD5 8ba0dc0820c8ba01ace87805943dba98
SHA1 9e5d1cb5ced4663c7a8dda60546a66cd06a801ae
SHA512 d6cbfb7460e005fd3646e24660d42ce41922cc88d614a300afd9c0e6e0364b86a26d1123cb73f31044f02f29315633dbba16f99adb1771f1f32ec173285b5e12
TLSH
T18DD0A9F34A0428E2C83EDAF3CFB6A6C6873F81A90F5CC284182481B38F258302290860
MD5 SHA1 SHA512 TLSH

Submit Download

8de18f9190ddcf10_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8de18f9190ddcf10_0
Size 300B
SHA256 c76369c31e395703d6f048b8c1f88e9a96caa79122a88222746045689d7ffb15
MD5 1bc13eea5da3df1dc810f1092fa4c80f
SHA1 53e282a5770f47b9c6456b94d22a9e865e8157c5
SHA512 eb608488300a35c0463ed0ac897d5cb3930b35adffbcec7101d48cc1fa6c7334a440597a20961337d52145932de8b291acfdaac5d2e406800359b94c673b4416
TLSH
T179E02BF375A04D21E85E2AF1EF159B0BE72384AE0A7FA1561031D0E71F20F76A6C52B1
MD5 SHA1 SHA512 TLSH

Submit Download

99f08bc205f9fc40_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\99f08bc205f9fc40_0
Size 308B
SHA256 b28a61416ebc9b479802b777c98d58b4321707ea67d5d3f8055bbb45c200d603
MD5 c5bb80ed94e47edbd8ea0fe048cf6126
SHA1 2e0b7e5d6a285999465a91a81e466a8d87ad9ab3
SHA512 6fde8c1cdc879f568932176cffda333989bc43be05bfa6e10445a95321dc30ec75684f806b3c2fa9e483d8fb8cad34d8b477d653e4f0b19c79c9e75d9f8524ab
TLSH
T133E02BF324414B41F1F7A6F4AF6993A7C65BE4C0096E829F701448731AA03F1A596AA2
MD5 SHA1 SHA512 TLSH

Submit Download

9a6bc3e44710549f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a6bc3e44710549f_0
Size 62KB
SHA256 1fdfb89e1ddf153ec6c6ec2be88a714f69e27c4e775f3a8026c55c23c5a53d62
MD5 012d8ff9df626b0be293eee86da253c9
SHA1 db34425a3caf3132344495e52c420c3e423c0c45
SHA512 2ac22581ab6858834de018bf80c8a87bdabc9d265dc420c714ed23817ba40310c8c41b4904fe5c6d6766dd8fda4550a5b62c2f6c725a1a86849a921e743476e5
SSDEEP 768:D4KuU8nGo7Qh/GDuZDmO5rVXbW/UdXUdf36qjUuU4mG6yhqQg2rUsrUJwc6Fdyxa:D4dXGd/GDUr4QkKPGLhWQcZN4
TLSH
T185538115AB44AD95CE3A67F442728B23733185883EC3E72772F8B3352C186D55ED988B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b12d85975979458c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b12d85975979458c_0
Size 263B
SHA256 b6b24183b8ff61d9408a99c3f6d52a9c1e8fbe16068d5fbfb8779c6aef91c611
MD5 6142055c0f767e6e5f3a0cc5e06910f6
SHA1 b88621a59a19da77bace24f43a3821aea76c4ef6
SHA512 33d50e16a1c91bee58b1eca87c48fabb831d8c05ed9ab62e9fb034d81aed9f7cf9c10dadc6e7bc1e27370ca779daf62eb4fb943fae4cf56fee233850607be471
TLSH
T145D0978387212E20F83A49F0EBF2838683E3A0A81A1E2180A021C83344810726CA8882
MD5 SHA1 SHA512 TLSH

Submit Download

b39b63ee0442f35b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b39b63ee0442f35b_0
Size 281B
SHA256 e6fec273b2ce510ce6a39564ae967ae19663c9fea4ed9cd2ee32efd2daa622fc
MD5 0b3ea90da40dc1b0a740c88f332a7d35
SHA1 ef6975592a8c92a5367e2530baeaa934698de039
SHA512 ce237cac6025640de050e76e257a9f7e66ee4ce9a2ea04be60a60cbe06eb155fffa9d5d1dceddbc5d96c88a82a91a4d86ac0997106ec93d93fd65c87877197c8
TLSH
T1FCD0EB635B08720CE20850F8C67B8C82C833043007C8C2146B00E2232D20CE222C0211
MD5 SHA1 SHA512 TLSH

Submit Download

b4eeb04b904a85fa_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b4eeb04b904a85fa_0
Size 108KB
SHA256 3db0441e4e24fd49cacfcaeb15719f4e5286a26a2db25e6a419a4f633cea6791
MD5 67af859c31c3d4565b56fcfccbb89039
SHA1 99556aa3713a0fea13c8f491c9a842d4ed96a0a1
SHA512 91e1b2d262e835c2b534acf65d819877a47accee4b863beb4e47e9cf08dae9dc64c37ea968f8ff1820bd077145f0055500254f792fae84c921ea82cbb26798ca
SSDEEP 1536:yXR5xPS+ZuUGh4QZc3ZOoLog/WqmPHb7aqdIwVl25:84+ZuUGh5En1S/h+5
TLSH
T10EB3D8751B60AC95CA3657F151638C27B73349087FC3E72FB2A892362C4D6D90F9A84B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd553e6a16228036_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bd553e6a16228036_0
Size 268B
SHA256 407e2bc24dc557cbec8ee42da69a2ce3d56271e03a979c0d4c3f980eefa1f1ff
MD5 4556237e8c8cbd8b26c3c15f8c6e3445
SHA1 b238671f0c4395f2ca08fd31dc9e40f623953f37
SHA512 696cea73cc7f08a7b2913e67aafcb667718b8044634052aa805ba75d1459d41c2b60ba8b51aa6fccb7042f9d70afcc778a15561d6073f5d7e3584a299f278828
TLSH
T140D02E97412C2892E5A805F2AB6E9AEBC36141A31B8A80208000E2736CF04206EA84CD
MD5 SHA1 SHA512 TLSH

Submit Download

c9f750b8a5719be2_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c9f750b8a5719be2_0
Size 255KB
SHA256 50b8500236686ac8b29a0e4dab47516e08866a35aa1b5f85d44d5d43b19a5e53
MD5 5824d501cca2d8b6f302637ca81f1b85
SHA1 d16c231dc60eb950a522894ca0e788622f65dd92
SHA512 e665a37dfb829a586934431096101116d635c9ffeb084529065774da60eb701a3f5276c4a15406300a3e9e763a4ddfc24f0619b884ba4167c547e6170da56632
SSDEEP 6144:+M/zMLIOoFoCsdRvbPh54Jx3OvJYJ5SSjJJGwGML6wW58O8XQEItIJRCyT/t1qi5:fgLe65GoIFb
TLSH
T1FD44B689A384BEA9CF26A3F90552C9277635405F3EC3D33722D0FB253C562EA5D49C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

caafdecc1ed9af57_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\caafdecc1ed9af57_0
Size 724KB
SHA256 e7ef6cefd72565c9c7ff97e5975c7c4848ca3e50e0963110d39977a886fea06d
MD5 b15df78a65d34b3599ace88d673df8b0
SHA1 b6da9a0607c79743f7f8e6e385be3335c0ab1648
SHA512 e528178e48f0598dfa155dcbe7aaa1c8f6b7d4449f4ca7878a5498113da2ec46bf14cc1034bfda208c1c46f8113229ce121327b2a1a499aeedfa21f96527923a
SSDEEP 12288:1t02rtntFFWDcCB53iPbfJnp7BvzDXIzZJ6kR/Hq7HDD17D7Dz/LD57pD7lZ/dPw:1t02rtntFFWDcCB53iPbfJnp7BvzDXIl
TLSH
T12FF40666D785BE6CCA2552F089629D62F17910DE6D82B64333E4DB383CC81D44FA7C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db1b718d80db835b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db1b718d80db835b_0
Size 291B
SHA256 5ece9702500c786e06f88eef89d8b8846558b896bae49ab8518bf789c24c4066
MD5 f3be9db755e4e9528f1a58f40902a6d6
SHA1 ca7a8128db7ffeada977113cf9a80edc80eb1338
SHA512 ab4964249eb0ed476e0065ef5671ab7fe7d7dfd2bb237c1a93380f2c9e82e9dcbdacc2cf7273f9680d98ef46274c9d83e15411260711b3813ce6a29afaf8d0cb
TLSH
T167D0EBA321308001EC1840F2EFFE91A0E232462A9A24C1EA1601E4F389C947AC241C00
MD5 SHA1 SHA512 TLSH

Submit Download

df6f6d1cc212a7dd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df6f6d1cc212a7dd_0
Size 37KB
SHA256 bb036c0202fe109cedfc2c7b7953ffeea873a08843ffd1fae7ae8a08b8d4e05c
MD5 33d90e343c9a412fa3d3c1f576f027e5
SHA1 33c82836172933146922abaccf09ed96bfe7cfed
SHA512 66cdcbdfa2b806605d77d92d8c755088f906af385ba2d2342088538e4b4e0d7371a00b522c2baa640d6899fb3359a66a2b48c50a62fe734bbe1bbb5340a54c26
SSDEEP 768:sMlY32Lb44CoUmvUkh0Ipk7vHVKJ/47k/9y9WCp:nDn0lsJgeC
TLSH
T1580394522B91AA92CB3653F101628926BF3645483FC3932325E4B7365C263E7AD1DC7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0438e196ae3c3c7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e0438e196ae3c3c7_0
Size 47KB
SHA256 e8d57ad2477421b0f9a7cc670e4487597f46a898eed3b6e739086e49f44cf1a1
MD5 d688a376800929a57883b3eb448d2946
SHA1 9481eba9fd5f17181746dc01f1a12cd90e8d0625
SHA512 f5092754583f29100e7e3dbb87b93542ac6d4da42a3237c929c685354f8c2256676852a1da4dd734a9a6f04b9308b3636a089b3d2b9461d9154003880de4d6a4
SSDEEP 768:frUYmEDNSEUPLLUFQBUmrAPYRJogGcNIGj+Um8gT999dT33I:TUgSV32QBUfPcJ1G2jDbO9hTHI
TLSH
T16023621923A19A95CE3733FC41F78BAA6371951A3AC7D70772E6E33A3C010D85E9681D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff22e67b767484b3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ff22e67b767484b3_0
Size 51KB
SHA256 76e5b878899233ebe19cee563fd22627f473511c3db72e415d26ed28094efb94
MD5 6f7267a94d64752fa1df1a6e72e52d3c
SHA1 9e18b03096dd1b67c3fa1c65e6ad663054436184
SHA512 48226b294b6b5fcf318ba86209a1bd6c17ad515db3a509003916438e3b584db91b629233676c4f4eeb3f3dd5f7e5b6c58149bb4c3ad75ccb07dd39362f9af78b
SSDEEP 768:tCN5hObd6HIENWMFUodNU/j+wW1nIAFp+vOGTaBe/IsXxY3o1wv0:si6oEjdNU6xIip+5agBXV
TLSH
T1B933F7265B90885ACB3707F581E78913B33542823FD3CB1B32E4B2365E567D54E9AE0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 189bef532f14a5c217fd21b62a85662303517186ec922f48150f7a3c7b931de8
MD5 97fadae7f4509522cb179260c5390290
SHA1 9fe65e881a361246c5bea3f15f998efdd681766f
SHA512 bbe93302744b5ecc45701cebe55d0d3d9efad04feb93b0088549981c8c5bbcf9e15a9636f969ff2f1313b4b094b0216288685cd931713aa67cbb9c4fd95252e0
TLSH
T18F61A599CB6E06D1C73AE5FE53F44AD6B2B5A8FD09475BBE0175D8B8AAC37021211101
MD5 SHA1 SHA512 TLSH

Submit Download

b5f3457e-3eff-43a3-9225-7c2c1103f45d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b5f3457e-3eff-43a3-9225-7c2c1103f45d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

324f0497-aa0d-4f47-9973-5526eb3b711d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\324f0497-aa0d-4f47-9973-5526eb3b711d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 4542ca923c502b326c787c813f37d7475f2bb2e6682a9e70783b3ca98a3bf5b0
MD5 84a47c18f16cc789e7969b4119632202
SHA1 4ba9badf2cdbaef08adc77880aa651fda8007ee6
SHA512 9c36ad98b923bc2b85fa022e64b570bfddcc8b60f1e10891f466a04e2b4f2543c69e9a5b2a19bc80a868f072c934017bf9fd6f20ae82b58c811856260eb41816
SSDEEP 192:Dl4LJ95esXJqJjJPlX+i0+E/y8EVKvf0RGaGPgzDGjP4pPl:Dl4995es5qJjJPlX+i0+E/y8oKvf0RGu
TLSH
T10CD18BF7C3D8C52ECC5396F167286E6BCE2D0A1542283C16C9D8AF5F93E1470D24299E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ac690fe9def26dd138beadb6e5c12d7ccadde66038c0c18aea498da4bdbf34aa
MD5 5e645b39a7d7ed6070a3b2950c5cd0cc
SHA1 365a1575b24090aa559e5ea60592191ffdecf050
SHA512 376e094430910468c6d0bef16e79a237381ddbd7dfca879fb6aa609903055f8d2b7244059e5f0a5c11562b2cf432e7725dfe7234efdd2e745e40262eb5c30523
SSDEEP 192:sxRsR4C3/fcsDgO2Zr1T9yzoA8pRw2/g6+WNIcS+feIBt4ibx+wlaJpGsIgVbJ:sxRsF3/fcsDgOArt9/RP/5m+fepfPv
TLSH
T19B42C9166938A93B9CC7D319FA55BF53E7F95022A1C15E44FAFC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 43e0e053654d2040b7286809b325a1c8d346d92fdbf517c12dc6e81587bd044f
MD5 03aebc7079bc5a36a4875b006795cb1d
SHA1 32b0a8e31b12e3dff7569ae676191ecb8e969441
SHA512 ba83c522a0bb293027c5eb93a2e301e150cb1de31690f3304d190871261a88fa57ff925226bba7888d8e9a76943c456c69736be122f203453f5dec378b977166
SSDEEP 192:sxR/R4C3/fcsngO2Zr1T9mzoA8pRwm/g6+WNIsSWpeI7tz8FxzlaJpGsIgDfbJ:sxR/F3/fcsngOArt9bRn/5+WpeMPR
TLSH
T17742C7566938693B9CC7E219BA55BF53E3F95032A1D01E48FBFC8A1C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8381c8757ef8ffd53f15d5f34537d1b1c74cab99a76276ae42c33c41ea354369
MD5 172c7e0d88ac41d267c02715d87e04c0
SHA1 f2cf37d5f9af1b7b36976a8de3f016c66701bcbf
SHA512 358c2ba7ee7b2eb9d6eee449735f5c2a78bb920e1f7f6b3e9c43628c30270c1326c0708e91dffb3c2662b5c8088cd8103332da7be9085d4404b3fb419882a94c
SSDEEP 192:sxR/R4C3/fcsngO2Zr1T9gzoA8pRwj/g6+WNIES7ZeI0vtDMhyxNlaJpGsIgDFbJ:sxR/F3/fcsngOArt9ZRG/567ZeZFgP7
TLSH
T16D42B8166938A93B5CC7D319BB55BF53D6F95032A1D15E44FAFC8A1C04EB6DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 6f50afbe4afbd7a8149c0c4e4966278457dffa1f0087a28c00e73ac6081a958b
MD5 2eaf24f6100f95c838dd4c431d3a566c
SHA1 83b0ba1e84a686aa6f5ca2c03bfe6d54e54e1df1
SHA512 0e2018bf625db7bbd9e12066bdac2bdb5879e3758e48ed8ef037f249e0e26290e4531b26e8f825c9006e1f47d06b202e9feaf0c26310102e8a994987cff39ae2
SSDEEP 768:0YEy7s7pLuL7+jWgbrfd18F1+UoAYDCx9Tuqh0VfUC9xbog/OVMp/rVaErojEYn:0YEy7QE7+jWgbrfd1u1ja7p/paPTn
TLSH
T150D2C97B740CCA7E4F804ADDAC197E9F7DA802CB96D8C95047FA981C03C6BEA51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

675be9f5-0a78-4782-808f-983394bfae23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\675be9f5-0a78-4782-808f-983394bfae23.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9b008bf7baee131d1abd263f3735d64c7eb65610e041b6d7f67d34f15ecfd57e
MD5 15f16b1bb7e491f7cce31944fcc45e1a
SHA1 50c915cb569d285541f272fa838e2e6bb0405715
SHA512 fff13c17e22f459483fe7cfb0eb0a0a78605741a0d6904a74af30b74ededd575f03e423134e06b4e560eade9e6dac1711146aa286885ed1cafc12ead03edd06f
SSDEEP 768:arv+4UNbdl3mPkKL2XQjF669yrqUjWiIwwxMRmUiler:absbX3NYjF66INWZTMUUsQ
TLSH
T16503CE30AC589AB3CDF2D28672437783BFB4109392C50B98CACD670D469B4CD2747A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 65a2e8c13d896615b2c0d8e01ca6847b4a6fd0c3a6df1f6a056e7ea24e254445
MD5 bd977a4d344a0274c4e208b044697395
SHA1 8d3bd76074b021e15fb791c5bf908f9801bb282e
SHA512 92956ee66a9b51e6c877846b0d11dc83a32fd05a68af3b07f1309aefe2b76f558f2cd1471a1f0c170e42d76cee55763753bff95d622d9cd193dbaf63ea5db213
SSDEEP 768:5rv+4UNbdl3pKkKL2Xir2jF669yrqUjWiIwwxMAQUiler:5bsbX3z6r2jF66INWZTMlUsQ
TLSH
T13E03BE70A858AAB3C9F6D646715377C3BF7420A395C10F98CADD670E464B0CD2B47A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 52eae119f0f1bbdebc9ae381b3f4d29b15614449a54414c081b36306ede4d525
MD5 e8361eb5e132f1b9a2ac206e5c87aceb
SHA1 368689f460a9d6d4107df4a6cc5faaf9bdc6a00f
SHA512 610d174359d4dfe84185724252256453c13bf46410471ce0f16e30307615941edf42f7486618a154fcd1a74165f204dfe3661da3edc16fa90e800a8382df51b2
SSDEEP 768:aFZ3Izh13uwgIUxNircfF669yrqUjWiIwwxMtQTX9m6yMd:w3Ib3JJrcfF66INWZTMCxm6Vd
TLSH
T13D038D75EC54DAABD9F6DB8273127787EEA000A385D85ED8DAC99E0E00870DD174B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 92c052e6f4d0f9a18a9a34318d4ff0ea18440be255228c020188777f7dea4cd1
MD5 c7cd564cf2807ef65583e94e2cc333ca
SHA1 a522d4cc86ae43f349e96ac5462f199e4306c313
SHA512 13ad04105639128fa4a1aa35e775710541226c9461d314b74fadc41d192e73b65a74d990da029822d82f955978096b9ff25b0dfe522fbb5e628aea074c2e2a9f
SSDEEP 768:23IzhP3bHgkKL2XirPjF669yrqUjWiIwwxMtQTX9m6yMd:23Ip3b36rPjF66INWZTMCxm6Vd
TLSH
T1DBF2AEB4BC646AB7C8E6E786721333C3FF6010A785D41E98DADD9B0E05470DD2B4792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 26634050111f001e4735eda7af3d09fbebbb819d3b255e6031ff574a1e1a7e49
MD5 315acc9ac279c3b82209a7abbe3cc55b
SHA1 651c1eac7236b077da2490f8c8246e8f101e6825
SHA512 483994210cca1dc020d63a9cdf9853f1143f6f12991dbc49b92e47cb5f607a7b693838a84f72995fbfeceaaa3b9f110ef859c7ee329dcf0a4323ca4818563da6
SSDEEP 768:krv+4UNbdX3cjgkKL2Xir6jF669yrqUjWiIwwxMtQTX9m6yMh:kbsbV3cT6r6jF66INWZTMCxm6Vh
TLSH
T11513BF70B868AAB3C9F6D74571137283BF7410A385C40F98CAD9AB0E455B4DE374B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8e3dc9815d86844211169671f89757ba5c41dcaa560b7ee42d9381593608d866
MD5 a4878b365488024d165b25016ba714f3
SHA1 809bcf5c85d9c755eec6afa2966c478cbe170a5d
SHA512 65b69b2acfe9783a1f345712a44bd7b9cdb65f52252b28b4c758d9206b82929a18c1a7797e5d29decf7d7c2ac741ed0822c5b16be9c3e2d7ad043772cba3a9eb
SSDEEP 768:J3IzhP3czgkKL2XirPjF669yrqUjWiIwwxMtQTX9m6yMd:J3Ip3cD6rPjF66INWZTMCxm6Vd
TLSH
T118F2AEB4BC646AA7C8E6E746722333C3FF6010A785D41E98DADD9B0E05470DD274B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

cbf54112-7c1a-4eed-a784-6cc972b524b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cbf54112-7c1a-4eed-a784-6cc972b524b8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1720_667296416\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads