68f6f136e48d99b3e2f21705b911c167210f49b96030ba05202d0245de982834

Analysis

max time kernel
155s
max time network
235s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 18:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
flstudio_win_20.7.2.1863.exe
Size 921.9MB
Sample260819-xdp68stvdx
SHA256 68f6f136e48d99b3e2f21705b911c167210f49b96030ba05202d0245de982834
MD5 0ae3105f25de01b112b97939194b813f
SHA1 f1248621bbcf5521d5a262497abf8ad409914bf6
SHA512 abd0e8828c29a3e7d8382356709bc4ca256b141a02c316888941f2b1493fd7c46d6153c97937971484ee9127b01a30d90d48f859107d53019dae8bd96b7e473f
SSDEEP 25165824:7ekAOjXmPZRsfItOa+fnVQe11EeplDSXXYOV:7WugZPMa+PVQsZTSJ
TLSH
T155A933EE93FC28C8F421963F05AF1AB13AE753DA4B5151467574780CBCF8F42AA35609
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2340_1549891133\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2340_1400625769\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2340_798991165\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2340_798991165\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2340_1549891133\manifest.json	msedge.exe

Loads dropped DLL 16 IoCs

pid	Process
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe
252	flstudio_win_20.7.2.1863.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	flstudio_win_20.7.2.1863.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5628	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316408362609639"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{364FD85F-B3DF-4A7C-A60C-E663900B10E2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6952	msedge.exe
6952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 46 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2340	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 252 wrote to memory of 2340	252	flstudio_win_20.7.2.1863.exe	88
PID 2340 wrote to memory of 4596	2340	msedge.exe	89
PID 2340 wrote to memory of 2952	2340	msedge.exe	91
PID 2340 wrote to memory of 5628	2340	msedge.exe	92
PID 2340 wrote to memory of 2952	2340	msedge.exe	91
PID 2340 wrote to memory of 2952	2340	msedge.exe	91
PID 2340 wrote to memory of 5588	2340	msedge.exe	93
PID 2340 wrote to memory of 5588	2340	msedge.exe	93
PID 2340 wrote to memory of 3080	2340	msedge.exe	94
PID 2340 wrote to memory of 3080	2340	msedge.exe	94
PID 2340 wrote to memory of 3080	2340	msedge.exe	94
PID 2340 wrote to memory of 3536	2340	msedge.exe	106
PID 2340 wrote to memory of 3536	2340	msedge.exe	106
PID 2340 wrote to memory of 3536	2340	msedge.exe	106
PID 2340 wrote to memory of 2840	2340	msedge.exe	96
PID 2340 wrote to memory of 2840	2340	msedge.exe	96
PID 2340 wrote to memory of 2840	2340	msedge.exe	96
PID 2340 wrote to memory of 1720	2340	msedge.exe	97
PID 2340 wrote to memory of 1720	2340	msedge.exe	97
PID 2340 wrote to memory of 1720	2340	msedge.exe	97
PID 2340 wrote to memory of 2756	2340	msedge.exe	99
PID 2340 wrote to memory of 2756	2340	msedge.exe	99
PID 2340 wrote to memory of 4620	2340	msedge.exe	100
PID 2340 wrote to memory of 4620	2340	msedge.exe	100
PID 2340 wrote to memory of 4620	2340	msedge.exe	100
PID 2340 wrote to memory of 1988	2340	msedge.exe	101
PID 2340 wrote to memory of 1988	2340	msedge.exe	101
PID 2340 wrote to memory of 3728	2340	msedge.exe	102
PID 2340 wrote to memory of 3728	2340	msedge.exe	102
PID 2340 wrote to memory of 4824	2340	msedge.exe	104
PID 2340 wrote to memory of 3256	2340	msedge.exe	105
PID 2340 wrote to memory of 3256	2340	msedge.exe	105
PID 2340 wrote to memory of 4316	2340	msedge.exe	108
PID 2340 wrote to memory of 4316	2340	msedge.exe	108
PID 252 wrote to memory of 3680	252	flstudio_win_20.7.2.1863.exe	110
PID 2340 wrote to memory of 3580	2340	msedge.exe	111
PID 2340 wrote to memory of 3580	2340	msedge.exe	111
PID 2340 wrote to memory of 3580	2340	msedge.exe	111
PID 2340 wrote to memory of 5640	2340	msedge.exe	112
PID 2340 wrote to memory of 5640	2340	msedge.exe	112
PID 2340 wrote to memory of 5640	2340	msedge.exe	112
PID 252 wrote to memory of 2372	252	flstudio_win_20.7.2.1863.exe	114
PID 2340 wrote to memory of 4212	2340	msedge.exe	115
PID 2340 wrote to memory of 4212	2340	msedge.exe	115
PID 2340 wrote to memory of 4212	2340	msedge.exe	115
PID 2340 wrote to memory of 4464	2340	msedge.exe	116
PID 2340 wrote to memory of 4464	2340	msedge.exe	116
PID 2340 wrote to memory of 4464	2340	msedge.exe	116
PID 252 wrote to memory of 2972	252	flstudio_win_20.7.2.1863.exe	117
PID 2340 wrote to memory of 2684	2340	msedge.exe	118
PID 2340 wrote to memory of 2684	2340	msedge.exe	118
PID 2340 wrote to memory of 2684	2340	msedge.exe	118
PID 2340 wrote to memory of 3548	2340	msedge.exe	119
PID 2340 wrote to memory of 3548	2340	msedge.exe	119
PID 2340 wrote to memory of 3548	2340	msedge.exe	119
PID 252 wrote to memory of 3760	252	flstudio_win_20.7.2.1863.exe	120
PID 2340 wrote to memory of 4252	2340	msedge.exe	121
PID 2340 wrote to memory of 4252	2340	msedge.exe	121
PID 2340 wrote to memory of 4252	2340	msedge.exe	121
PID 2340 wrote to memory of 2892	2340	msedge.exe	122
PID 2340 wrote to memory of 2892	2340	msedge.exe	122
PID 2340 wrote to memory of 2892	2340	msedge.exe	122
PID 2340 wrote to memory of 4268	2340	msedge.exe	123
PID 2340 wrote to memory of 5972	2340	msedge.exe	124

C:\Users\Admin\AppData\Local\Temp\flstudio_win_20.7.2.1863.exe
"C:\Users\Admin\AppData\Local\Temp\flstudio_win_20.7.2.1863.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x2c8,0x7ffc2b16c188,0x7ffc2b16c194,0x7ffc2b16c1a0
    3⤵
    PID:4596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,6958684307029892678,3796843906762710015,262144 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
    3⤵
    PID:2952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,17191897079413424687,8836934148289648200,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,649262344104634898,2577798685190982699,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:13
    3⤵
    PID:5588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,14905587660013741020,11992388488144551294,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:3080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,17385697481222297521,10377870775561690451,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:3536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,5388756827534050002,2635893265884236341,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
    3⤵
    PID:2840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,5656113858594025899,17302839396450633196,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:9
    3⤵
    PID:1720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,18174183485734885072,10524569472336862464,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:14
    3⤵
    PID:2756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5416,i,4100911795844868739,4100032148546127781,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:1
    3⤵
    PID:4620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,1328205500437917367,1244016970105689068,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
    3⤵
    PID:1988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,5528405763046411861,12719779261691657317,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
    3⤵
    PID:3728
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,9458977974176849702,12341889212620423842,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
    3⤵
    PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,9458977974176849702,12341889212620423842,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
    3⤵
    PID:4824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,11103139446316969379,571913706066971095,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
    3⤵
    PID:3256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,17632583112447510832,12765001502338807132,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
    3⤵
    PID:4316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6564,i,16306256638278988937,1151390986230359965,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:1
    3⤵
    PID:3580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6888,i,9071640533226947044,6397835089560006144,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:1
    3⤵
    PID:5640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6996,i,4293790284393452739,7142638815515140163,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
    3⤵
    PID:4212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3872,i,4735678419342068536,497430812720004941,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:1
    3⤵
    PID:4464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5200,i,208326798189584294,9060955599322384244,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
    3⤵
    PID:2684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5396,i,15372233279681259641,2046268033869398013,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
    3⤵
    PID:3548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7044,i,549524940641305765,14464925718291525547,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
    3⤵
    PID:4252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7192,i,15380307193249753810,6964673351795252331,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:1
    3⤵
    PID:2892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1436,i,11478354312624704124,1313893319197037221,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=1292 /prefetch:14
    3⤵
    PID:4268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1440,i,17049286454398839673,12206565019384512975,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7344 /prefetch:14
    3⤵
    PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1448,i,17370590743799192060,4582989635539804115,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=1284 /prefetch:14
    3⤵
    PID:4684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=1440,i,6292874468212130814,3011353376676264900,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
    3⤵
    PID:2936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6232,i,12766822037700093719,7715654033365128201,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:1
    3⤵
    PID:1888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7224,i,7838570915636866334,3005786639282954241,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:1
    3⤵
    PID:4184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7508,i,18411596049290381419,11308504113101083554,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7540 /prefetch:1
    3⤵
    PID:3196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7312,i,257754443326382326,11044667099394758383,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:1
    3⤵
    PID:5700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7440,i,5571226561457987915,5842218974531583456,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:1
    3⤵
    PID:3288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7244,i,13547136710139324935,1796416116630134654,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
    3⤵
    PID:1208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7908,i,9663831461225839178,18382259550911129964,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
    3⤵
    PID:3900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7644,i,2475286992827861837,3541030018630724572,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7728 /prefetch:1
    3⤵
    PID:1108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7524,i,9670545039835454387,10225170942219910983,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=7704 /prefetch:1
    3⤵
    PID:4296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8152,i,17765088730502499986,1710014909639686041,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8156 /prefetch:14
    3⤵
    PID:2632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8324,i,9557981435502862387,4098994221237040061,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8356 /prefetch:1
    3⤵
    PID:5892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8136,i,981807686295192048,832747838548110353,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8464 /prefetch:14
    3⤵
    PID:4376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=3824,i,9015090775467378505,12454074595783887201,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:1
    3⤵
    PID:2308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8624,i,3715869862629671521,17680751936948875819,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8648 /prefetch:1
    3⤵
    PID:1948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7612,i,16871403948664378969,12245376062976032403,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8024 /prefetch:1
    3⤵
    PID:1292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7212,i,3353042531095586000,11518869617211071219,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
    3⤵
    PID:5480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=5604,i,9655416305959445574,7626087511436001894,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:1
    3⤵
    PID:5784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8864,i,7704947653501864339,15064477658366320233,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8972 /prefetch:1
    3⤵
    PID:572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9120,i,18003254988272326941,3644156615655111767,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
    3⤵
    PID:1104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8932,i,10353472342158725228,13892525941938504158,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9164 /prefetch:1
    3⤵
    PID:1212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=944,i,5415526862068054248,8135967228032604058,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9056 /prefetch:1
    3⤵
    PID:6480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9084,i,16249580631285226354,6124149147449455164,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9144 /prefetch:14
    3⤵
    PID:6524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9264,i,6553060335912704932,2634291663403558186,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9332 /prefetch:1
    3⤵
    PID:6644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9384,i,1070250716884868434,9451445098933113235,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9372 /prefetch:1
    3⤵
    PID:7044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9612,i,16753315208464286802,1979863861417261174,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9420 /prefetch:1
    3⤵
    PID:6152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8792,i,7034813711545232811,18025766155030150343,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9528 /prefetch:1
    3⤵
    PID:6252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8804,i,13992564730013460116,11779848040471394721,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8976 /prefetch:1
    3⤵
    PID:6236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9072,i,10693331024588615348,14263365320726334798,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9592 /prefetch:1
    3⤵
    PID:6344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9932,i,18340602776994520288,4582555077591225590,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9416 /prefetch:1
    3⤵
    PID:572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9564,i,2071006311854034120,10951584295657334594,524288 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9888 /prefetch:14
    3⤵
    PID:6432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8736,i,17002368173020973899,2777583163102123589,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9716 /prefetch:1
    3⤵
    PID:6160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=8988,i,13859819437740034963,1356046141049235496,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8924 /prefetch:1
    3⤵
    PID:6892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=9948,i,7746988797989118613,13194525012635393970,262144 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9296 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=9404,i,15033607799053821584,9338369631074754797,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=9908 /prefetch:1
    3⤵
    PID:6884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10212,i,6838942034427202536,1383571229899793308,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=10116 /prefetch:1
    3⤵
    PID:6368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9736,i,11594519872736343147,732226525326265738,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=10100 /prefetch:1
    3⤵
    PID:3056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=8488,i,1316922197897831543,12200705998151626272,2097152 --field-trial-handle=2528,i,15458394016558552248,2779381221177572128,262144 --variations-seed-version --mojo-platform-channel-handle=8540 /prefetch:1
    3⤵
    PID:6316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:6464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:7028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:6680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:6324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:5040

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5700

C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
1⤵
PID:3536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4224

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 60f072ed20ea81d31dded90063848c3d97e0e03e1a70ca4e5ae53964d511cc4d
MD5 d2baf8df366dae2dddef46c559f7de74
SHA1 a45b7a24e762425a201edf2840d687ab22b62a7b
SHA512 5ab3fb201d7bb8ac581f96c336b4a434ffcde238ba2877d05db85d1b20c6b956d62d6720a8fe985d2dd511621dd3d400723d5cb009506f6cf2ea3ea9b0f4e011
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7g:fwUQC5VwBIiElEd2K57P7g
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 25KB
SHA256 44bacb1f1a4860588aa6ca1bfe39840f5b208cc04b15ee3b5c64658bbd7738d0
MD5 79d3b2be6dd9c91153fde9e65b285463
SHA1 8636909195162372945d6c4554d4a00c24d11c47
SHA512 83968a71e741c5debabb9a1bcf2e99be7c63bf2bfe8ed77bc10bdebda2b06e72ea8e94d016fc4c3876e0c4bbaf7d5b992082b8865c94c1c9fee7537bc9d9a823
SSDEEP 768:a5Knn763Cl0uiUNiANuXotBpl1/RO4YQOMH:/76oxiaiA9btJZ
TLSH
T180C2E12A0AAD4B8461606DA1DEBCB18E0519E770D658FFC0D1DC2E984D2F9DD4B1E0BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 18KB
SHA256 607d7849abe9069c906baf7684feb3774afc348a0e9253f9059c7d06ce40ec60
MD5 c74c7c7d8d7e75c8349c43f07abc220c
SHA1 90a9cfe479ae5a1eaf12942d0e56756e587920b5
SHA512 6a252d814a06b7271e2470108948111eee47bb1a512ed9ab442ae2baa14652145a2de72396627b399e89b2834bdc2d42974b6bbb97bda917746363a2b2fbcf50
SSDEEP 384:IPflV5v6zAubokIlk4fOoo4PyZErixnDm23LKag8oxTyD2oS:ET5v0A0okIlLffK6b23Zg3TyD2oS
TLSH
T15082AF9CAB6714B183B41713000DE6057B7146CFF3BF6364756AE49B2785E1ADB93B40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 30KB
SHA256 e8a47935e86d56d77cb02182a759b66e429f249697789a29f71e034bd95a5575
MD5 814a06ad5209ea490fb1a426c375b159
SHA1 f440eab8072df6603439bd72635f3b4e6aa2d110
SHA512 9efad3ef55e36361b10c4239cb675369765aa075baee681a437b23f7cfc75e70a350482041ace102070010a139a33d34a68ec1f36cec74b13e61e7b80ae36f9b
SSDEEP 768:gshYEaJUap9jJkV0IsatzI8k3VDlNQxfces7a93j2:gshYzJUijJkV0Ic8k9luHs7Aq
TLSH
T1E6D2E0557049490D91CEBE02C00B9D5202DA67172D7690DC7EBF988E4AF7B93C5A3AD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 18KB
SHA256 dd2b29d8fd0b581a5a6833554ef9fffa0734e6fab8271034194fcf6f5cf80ca0
MD5 6c57cf7d480c2f5b8ab6d1bc24ca9b85
SHA1 84bef66784b2e6ea7bb87e44acee10716278d5bc
SHA512 19c6ad1c9383afe9573fd2c3418c70b07ca80da33e6c3260755e79c659ed9127f1e88a211bccd488fe4bd4a7a547633ae4b7ccc8a689da28be667b31a50082e2
SSDEEP 384:iYNvm3BhB1AZtOnFPdmzF/x+2pt24/JWRIbwHvJjpYxfKzUUEmnXUUIC:iYNvm3BhB1KqFPdsNBpw4/JGIbwPJlaM
TLSH
T18982D02E7A69A3CF50404A33A6CBBE1435FDEF0B941839A916D4DFD4E0C45EAE127412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 142KB
SHA256 ac1162e3abd0634e62cd378f88d6c42fa4056437ea3ea1e711b01dc1b8fef243
MD5 1ca699822f74664dfc38c95bdcea1ae4
SHA1 c664b2fc38cc4166038b02af18beea59eda375be
SHA512 c3894743c74808fb5ff48f9b514bf0b80663c40bf6e67a7b61199cbbb08ab66ea3529003af67ac66bf0aada453cf6512cd8b0a86291fbbb651320953ac422717
SSDEEP 3072:WnXbVoTUV7RaE9+6mKNlkpEPxcskUWRtLu5mt2xC7jYXR2:KSgV7kfw6KJc5zEVxGjYs
TLSH
T142E312922F6EDCF46EED09C51898E0281781CFB50B15235FB0AFB5A961234EFE85059F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 33KB
SHA256 0ffc0d3c85b703a5c5b935015bca75b0494513592d2fbead2b60754a93c53b4a
MD5 8458277897a918205f41d8ff87995d53
SHA1 d5ca935e604e5180dbb8b358d4cf8fb3dcec804a
SHA512 09efe03d996599701999692a4bd2dbc0e5782174b8cebd4da1701053571e794786b8a41b9f170c7013a79ba2b788448acd27b1e8378b278bc08df4a5ec91b0af
SSDEEP 768:z5R3yYPevy+ryG+LCCBsvaa5quGBZicHAHDx9+GNV2tDAIYtwGEr:pPev7ryG+mCBGa/RZZ2xxQ1r
TLSH
T152F2F2DE7B5CB6F9A03470B2A87AAA1CD5F4E61C69C40461287243DB902274EC39CDB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 76KB
SHA256 91f369eaeff174e7d807bc8cdd45ad0ae1b03e95a3c8e40385641af6dd861910
MD5 040e0cef96a485cf31b564f213f2e6fb
SHA1 131cc3a45c7de708379b82a1c94f778bb636b257
SHA512 f56e1796100170004cf6b022c568405a52d3f7483922603a903f6d5fa2d7a3633e92cfb67c8fbc3e6f78176603b8b843d31bc0b473aa6db4a3d2a24e4de3ad46
SSDEEP 1536:e872ry2msxHel8hxswWxWFBHeNC7IT5KNNmsc8k5j4wOV+geCBI50aj:Lyy2msRzhCTsoAkKNN48k5cwOVrI50w
TLSH
T10273028FD535B97A9FB29B70DC84053460950D3D6FE52BC6C463D920C0ABE72FD498A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 21KB
SHA256 90556675373ea9ed1d0e9b5678426d69296b6801c906ca378bb426aa3d6acdc3
MD5 3eb14f3838ada50e10f062a895c3b9cf
SHA1 f570b2fe0688332cf8c4a9127db25433d9a1ebaa
SHA512 cee1e0f1a0903abe5d00e0cbf1150e990494f950ec7b1f5dc50a832562db30dc1dc6ae437e49c13f50e75274b11703251d0018cdd340ba3544d3a16d319ea6b1
SSDEEP 384:UUAzOARVqPhcEBht09b4FoVNRCgWSCZnq3Jxshb6dddddvyFRCi79Z:UUAq3hck0SMNRsZnq3JxIb/F0ipZ
TLSH
T148A2D07379138094C745DA15DBF93C7E48677BBB0278464883CD2AE5AB31B9C8AB080F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 39KB
SHA256 3128c79bcf42604cd86fed0e892167ef5a4ebfdf6b69ab4d525e084bfad938df
MD5 82c402c83f988063f1306800afb632e8
SHA1 0fd5c9b9c72304c0fb93ec2f366d8d2e0c5ff35f
SHA512 ad5c42c6f62326c4698bdab9adb7966046eef21ea29cb7427b0e9ca82e1f6fe7507cc215fdb898ae6a7ec6f3636809ce8b4f22f45dcffca32ffb0db18407630c
SSDEEP 768:a/gNd+cBqIOOuLfh+yuwry13kleZk8oJj84A3zb6h0geOSD/1tBSz411zq:aU+ckIR2fh+uyxkleW8oJbA3z20ge3Zw
TLSH
T1D503F2DED5238A8ECFF13AF29203E891BCD1592506DC9682C54C6874D1F57B7130DDA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 174KB
SHA256 4e49126dd22afce58530ba4bb83cf4e55e86a170f3a87495fce3155f8bb914ed
MD5 34920957fd225db5ca6838c13c6ebdad
SHA1 fb2fac81adee0c1d4517cb5e5019551a566f26f1
SHA512 dd8742a2c08f0de075bf81b433942ddaf97fafd96fa3a09e0a2eefd5aab5cc65a5806f045889b9cb4cdfc9f2f9b003b8b6ebd9962d81c2a711b72a62e448448a
SSDEEP 3072:l64jzLg6nrVx7AyaPKFUOTLZgeOZt11y05ejV0muBcqCafanbmkF7Qi6Onqj:5rguTn+OTthStTkWmsJpACMnqj
TLSH
T13B0413BCF22C93E495D7E6E70D7A9A2F57AA6C3654C8C5DCDE8087FAC146680ED0B110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 183KB
SHA256 dab620aeecdca632a3042634b41cc7f06e8fbd1589e26acdd4164cab0a52611a
MD5 6794aa9b59c83955ccb2d2e0e9183a7c
SHA1 c74caedbfb75c614e34fe20b16ed4f30a1a1e1ae
SHA512 224dddcab4fc7660fcc8405fe6282c8eddd56f7e860ab55b9f8c732c53a6992da3f70722949b7ed5a8988dee2c4ced9bdf2da8966432c5c4cb1e7398a84624e3
SSDEEP 3072:5cAbxiXE8fnh1lWN1HvEQAZEaLxJ6inH8aeRZ9GBSyJzg4UchyHqzU/fAX/ku/4L:JOE8fwbXAZ1xJ/2RZ9GBSyJk40X8/j/W
TLSH
T16C042345C12B2CA21BB397F5B33D5ECD4B0079368EB9CD37B5A2274AA5889C50CB1D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 158KB
SHA256 17c5d3e4559a749e1da425782da784e8db4067a0a6fb8791759f972edd6cb521
MD5 2e29e306abe26f2b8fec42fb454efaa0
SHA1 1ffe097919048a0163c0691291432b3ba2c4a437
SHA512 03069e90da2e50cd4b8f7be6fc577cff4a165d1d0f367e3a383649486be4b636317a5d59fa197fb93400f5fc1905af7ef458993b59857d55e8426f481ba59f49
SSDEEP 3072:EzYv7JBMOyi71oTTMflcUMj2/x8eocri82SvAFyRcf6qcWSS9cF9AWcHKY/m3Zth:Ez6ZqTTMNHMiCe7rkkPqLcsWYK+wh
TLSH
T1C2F31376A121C6D4DB097CDA499D4C6FFA5EFE10C2839724B0CCB7DBAB1E5418A0899C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 34KB
SHA256 cb219e697b6d1c5e100c5bff58a1e890d07eb16d3adfe0422e733aacee3d94c1
MD5 4b0423ee6bf91b412cb43d5b3cd2009e
SHA1 eed399d0b2bd9463481a81f9e004d086c5afcf6d
SHA512 f24f657f9af578228a71afb1042a1ba30d4d4b9ca081e86240c4c424446c54e50d038f10957543e67c306efc167d84f1a0485690c833973117a12c942dddd524
SSDEEP 768:bJr4fOg+AHbe6Wddb1dyVeRs2HMFMnr8FKuRIbw6JG6pFs0n5:bJrAOgZHbe6Wddb1dCgXIoKgwSGqzn5
TLSH
T190F2F1B9B2D4E5137340A7B1884C39574B7AB9A7B0F88B4ACC5F85153B7F2601909F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12c6482f244cb683_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\12c6482f244cb683_0
Size 60KB
SHA256 437b5c7e18f558309abe61a37c8b9f9bd2e76928cb87cdeed164286ac8766311
MD5 975a1cdf365736a67bf29fbb3b168553
SHA1 17146657f1fb641a213da6f1681ab78825e0737c
SHA512 56e65ee4487acd48d2ea5ab4c6bf3dcfe1ca0e227d26348774a8f01aa0a8e48c0605fa910d403800771eea6de8c589004f76c6211c7183e714f75847135996a8
SSDEEP 1536:3xJvbu8W8IRHtgj8f8TPDbasDE7yeYZG:hJDuRJHSDDbKW1G
TLSH
T1A553A6152790FDA5CB7A53F581628A5BB33544883EC3D32362F4B7391C2A6E61F89C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e70b73682e59063_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2e70b73682e59063_0
Size 281B
SHA256 b188f1abb3d8042fee4fd74e81110bf32e181546c10b6d0768626456c11b9f87
MD5 a7eb57c5cf2e13961174b2a68a44bc7e
SHA1 6a806e4f2e3d23a4eed68753169a100984d0b1cd
SHA512 3bd6fddba6ad84775f06a57e7ea836244b381eb43aa69a439e1f6b50d1b3cad11371cf568554aa542a6201dcc58e43b7a1345f13b5d431cedfb21d72a53f942b
TLSH
T19FD0EBA33CB06011D80281F2B3757309458380050042E0A4C38A986BE9C00B0A980C03
MD5 SHA1 SHA512 TLSH

Submit Download

38add206673d99dd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\38add206673d99dd_0
Size 66KB
SHA256 a25262c1e53c665251fb2ffb81504669ab19e950f99a386cc1d8a315f530d1a1
MD5 ad306e49f8ad6b8ba7a4ec6aa55cce19
SHA1 1abad5f04a74f4f89d7b77fc8cbd79bf0deea77b
SHA512 7896d9a75e8eb1f08164fde6771386eaf9e0dcbea3880faa28e9ccf185b3d8af066936c33c2742d42a0088e69fbf78993e1ff8e30dd40cf4f0f1a421203d77cf
SSDEEP 768:74HSjDL8ZVkvN053YaExbpKNrYsZSwV/q5RJ58W1hsnYsz2/zZ1lLo:TXL8v8N053BrfR/qN5/Xfsz2/d
TLSH
T1DA632079FF116B42D43A9331AFF12078B91D990AAD41A39B7055F2B7390B487FF82189
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e61c56057355737_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e61c56057355737_0
Size 273B
SHA256 ee58d30c31074543c2ea04c9a8a29f2b8a88ce6a685abd35221dc4fbbab620e5
MD5 b9508d1d0fd5f10f5ec0134d82536e5e
SHA1 5680baca7919d58711f2c8b5418b2b2d47922f95
SHA512 20358dc9af90be7f80fe37320d2d13a0054f5a6332ef27625bac05aa03b0790c1d18ebf4877b28009bc432a179c14ec40cb5477e316449163c25ba6fe647510f
TLSH
T1C6D0957F10372481CE0486F1D94F320BD62244391CD9C6D1851301695B76562F51250C
MD5 SHA1 SHA512 TLSH

Submit Download

51e5149b89d103d5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\51e5149b89d103d5_0
Size 355KB
SHA256 68f84294e465502ce048b3af96f33c51a65f5282405e87c017dcc1bca0355f2f
MD5 b5125defa61da57a224b490b30e53faf
SHA1 e62874d082fc40247dd54ee1bea1f300788118fc
SHA512 98d0b8b30508a19374c57439bb0fbebbe656c232ad713aaee278618d70884a9fd8a655d66156231557f9534ee30d807551408876bcf19ab28b3c442362f1682a
SSDEEP 6144:4X5bARMXiOy9G140BhULIo71ds8xoaiOOD6PyPIW6CmE10VLOwGFZf7ovjq553Ds:4X5KEjR3kPe2Wjf1yt
TLSH
T13874181247557626CF3A43F846638A1A7770814A3F87C347B1E463362E853EA1FDAF89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a1230ece115952e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a1230ece115952e_0
Size 612KB
SHA256 3b4387067029fd7590428b0770b663febb5eee7ad933f903e5e57417299ea6a1
MD5 84451dc8871313d76c9e5eb4f0c54e5e
SHA1 181e8263d8791abe3dcabc94d486d9bfd17a1736
SHA512 ad39c2a01e860cb4592e06ac8046cd3c3e55b9d9bf1f387aa9b2e9d6bf3631e739c7352d6d0510f201084240869716f30a2f9100ef6cad3dec658759b446b222
SSDEEP 6144:dyVWtN+LuGzFkxDMk+OF3q28LzND6VDdrzEsdeXXin+Ip7NxGfA208D4UM:dywnYuSyX8HNDIDLkyCf1004V
TLSH
T1EFD498049F90BF75CBFA16B082D3C9677136458A1ED2914397A07E2A7C1E1C61EEB84F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5dcdb71bd90a48b6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dcdb71bd90a48b6_0
Size 262B
SHA256 ca67614fb3e4007ef0f10cc28eb51c2a36c54cabd72b5d587187edc5bbda5f92
MD5 4ab7df49e3dcb84039716c60f1c3b68e
SHA1 d0bc3c7b4b3d9fb32f84729eaefb5cdb20be9641
SHA512 092f9fa5456330583e6ed40f2625f821e74ebd98f403515c159edebf7c5483c0454c09b3fd8c92338de90ded84108249faaa3aed5ae6e4c25816c0f20c778358
TLSH
T18DD09513B7344041CC18C1F1F22793498E27719C1C0FD942440450230393563B111F47
MD5 SHA1 SHA512 TLSH

Submit Download

7cf6787f0a7089af_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf6787f0a7089af_0
Size 3KB
SHA256 19114736db023ee9011bf757df261e3f392b7e2643fc3e7e71f33735e5a470a2
MD5 be2db419fea851d2b122fff68e65af56
SHA1 88e09e32b205f3b4cc98c007c296f3f74c4def5a
SHA512 c7b2b714c4470634a031c819776ab8c1cecd839b220932dad31ec295ba5aeb0c16136a76c1bce9673ea66944c52eface19fccdd35712624459bdf6be0659efcd
TLSH
T1C6613F3367D1EB19CB3213F041C18A2AE732845A7FD78603A2E1A3373D161F56A5984B
MD5 SHA1 SHA512 TLSH

Submit Download

7d63e3d23091d396_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7d63e3d23091d396_0
Size 68KB
SHA256 11885678145e68101a29a8086682f1878be057ed4080ec187c717f0a6592c685
MD5 901747d0d353c7a169f26aa7a8620ef8
SHA1 5043267651eaae3042355a3d723f72b549c800c8
SHA512 500fb41c7e6810aba36ba14df43a9b6ce75bc632a998478d7f615ff423464f5029b6bf741e08f6c31e712129fa281ce7f62feadb1db311e5b9e3bfd1d72f9aa5
SSDEEP 1536:JVXZPSpXMKhLzVLqhHto2O0+lA68D/Hisp:XXZqK6ehHtbpHtp
TLSH
T15A63D5413780ED96CF6777F542B24BA73331844D1EC6E707A2B4B7291C8A0C9AD99A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e4aab487f31e42a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e4aab487f31e42a_0
Size 295B
SHA256 54711ed4a481d717aded780735fde285585b4a87ae83d1167f94836539639040
MD5 63242a382caf7f320a8b4371337c819e
SHA1 74897740aea4f8cec3c658ebf7314bc56b05e6a1
SHA512 aaf0d6d797af46b54f74dd07af82771151dbc42f9a13ecdcdb7e96fb5ecc354fbf28a6040be63c5c8d5f668fe56076b5f54478cf995670c1bd725fbca7026812
TLSH
T1C0E02757D8763080D50D85F5D69725194732B159DC8DD3C11092F4135050FB9565469D
MD5 SHA1 SHA512 TLSH

Submit Download

7ffec7e0f3d26cf4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7ffec7e0f3d26cf4_0
Size 686KB
SHA256 491176847e108f6e8efd3f3698b6f4a1241809674001debaa89a54cf279eacfb
MD5 cda53907c12b295e59a89fd266b6c98a
SHA1 fbe91ececc29442381f25e8820233a9e9cee2fb0
SHA512 676c26e011d3b174ca81cdcc6468857387d984e83ca22420f625518dfafffc0dba7588589ec0ecea8dba3c63a8a14e93859c91364beed38b2d9114a1a8b7be9c
SSDEEP 6144:X1NylCeGq4cdU7m426p9Noa8tx3ge9WuCNDi4VejyFK4eyObgek7zmf7AFA8awI0:XPK+zroFH3xMZLejt0zmf8FrTu
TLSH
T1B7E4B600EF817F36CBF653F552E3C5277536414E2E939203A2A0AA2A6C1D1D66E97D0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

800c2eb8e2c49657_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\800c2eb8e2c49657_0
Size 278B
SHA256 68929cd08e2dd72570aef334aae8a928be0ea95d27501edd7f14d1efa75aa5b2
MD5 ada3e400bf6c8904aa0ff2c8b2fa1d97
SHA1 752c0a414b6b7c292f9fc41b0ef9752f27f87554
SHA512 117b0b751ad32e1eda4b2c831dcb9a0fb8c5e8cfc188a2dab62ea840215e4f8da30f62c3e245c5300e8226a9d64557ad1de3fe331f993b71b3ef51872c1b74c8
TLSH
T11ED02B93B1242691EF0589F4F4F7764B8316A38035BDD002C44D6367CB625F1040A414
MD5 SHA1 SHA512 TLSH

Submit Download

88c540e9d653d250_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\88c540e9d653d250_0
Size 290B
SHA256 16e3e5177d1e84f63942f333a1c54fc4cda2caf12678e4fbbaec00caa5e59781
MD5 65932047836ebedc266033a395f68e2b
SHA1 b7cf899c96c5e8f96689d9b999f555b1c94e6ed0
SHA512 6f821a4b8de61d4f9565da96ec52bee1a99db36f5b468f87ecd3099da0117a7a1fb8e5faad2c3b8f1cfaa5f69c18acde5a8a89f591fffe84abd739835053b2b7
TLSH
T1D4D02B530525109FDA4281F0AB71B348C5D38545151791D44455496B13994B26696CE2
MD5 SHA1 SHA512 TLSH

Submit Download

a2031c42cbc4a228_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a2031c42cbc4a228_0
Size 276B
SHA256 29e44392bfed5c8f99eff13352f68612cbecc7a224352ca60fc32303ac8a57ba
MD5 2f92b21c1c8e45b97b01e8e4f1feb5b3
SHA1 cd25267a53729980e0d4a4e898627fbe7341fdbb
SHA512 a2347544531742d9a97c695071f5cd8af039a662040826f813bf9926ad8e7ae3623d7c88be9ac490a386613d5e57eb2c5bdb4a34408ce4eeb767a2df0ceb1003
TLSH
T1EFD02BF76C355106DE5BD7F0E2AF1A5B8621601618D5C14A4191416356B4471D89304A
MD5 SHA1 SHA512 TLSH

Submit Download

a265f056bab23259_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a265f056bab23259_0
Size 289B
SHA256 f1ec340f631e46342fd578321f2d2f772df6d87592f84af013b18a14be4c2fd2
MD5 97c81e27f25d56f963adc5fefb199db1
SHA1 b07dd78058d27b4d130367750796435f655ae763
SHA512 106eb7df85537fdfaa4b28b55dd4a818072bb0ce9366f84d749b2f37d6a52c14e37dc3f10613c79e3b20c9cd8835b2a44cdbb82db6784c419a313e29fd6c305e
TLSH
T15ED02BB3E4326823C6554BB8CA1B3A04CA7197755DCCCE50D0D299E73ED81EA5D5B0D2
MD5 SHA1 SHA512 TLSH

Submit Download

a5e7a7b07f2b6a04_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a5e7a7b07f2b6a04_0
Size 86KB
SHA256 2d3cac13fd68117236265b93a0c5caf39955352b01d1b9fd38b3b78ddc1cb3f5
MD5 931eb3ad0cde5a007c368861735703b6
SHA1 3112f22bd519af8104a2ec0d0037c1aa803705c7
SHA512 e7d2b04e2fb827e8dfb55394aa70956c4732d39ceed51a7ab2af4fb05a44e031b5c4a4fd4441b5c943383ef126ab3aba9276031fc4d4140c89cd998667056a56
SSDEEP 768:FAd/4bojfmUpuMlrI0XEKe8mZe6iPzyH8pJuzfsPEZHSduIUcF1NlR0Heh6tS96+:Fy/4boHIQErZbKTuPhEFTXcqQv6hGCD
TLSH
T15083736577C1FE75CB3663F44212CA667632899D2FC3920732F0B6292C4A1C91E99C9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abfa7f64ced25700_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\abfa7f64ced25700_0
Size 282B
SHA256 34d140a7093f2412c8e503b53cab414606ddd5d177e72ad12b97f05862719fcd
MD5 f198f40354eb20fb5c8116515a80b8a4
SHA1 22f7a88d9871c3f96fd075dd0fa8e74b85afb408
SHA512 b78c4175093fafa736220155930059874a740b0474201b6d34ab969ac9a8d47ea4016b0ea1d9bebc7f7ea9b51e33cb10dd7cb91c50210821577716a4581b1512
TLSH
T15DD02BF768327814CE660E71D56F668645B280D538CDC9C5A06E258252B05758C31666
MD5 SHA1 SHA512 TLSH

Submit Download

c0c54abd67fea39a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c0c54abd67fea39a_0
Size 6KB
SHA256 890b9293818ab61d854f6da9e6572e89bea818374a5d182ec4c20fd55efdf18a
MD5 439b1537b87fba065bcc257ca68ff4c7
SHA1 d2501e85afdf7ac8a7ca2050f3c282ec552cc142
SHA512 cbe29ec1247909f23c78e5f028ea2c2ccb6b7980555589645c9bacba36d7eb7c7b90e41e0eee3c4839f8680fa345629217fd9dce31777dc8e28aa14d5bb987b5
SSDEEP 96:e2mQn4yP2MQUtex73w/SZLblbF6UrO4WylQLjmCcMtR1rz2wIR/w2hVm1tBy5Uvx:eW1ZqZLBpb4cMtPUR/TeBjI0
TLSH
T173E1C491A7A1CA2BCB6A17F62192893AB73195053FD3830610D5B73A3C523F2694FD4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0d941120d83b499_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c0d941120d83b499_0
Size 883KB
SHA256 91c748295d5c60cee7bb51aab858ca06fc8915d61351f01762af2d8adebceaa4
MD5 e52af0ab7fc18f92ceef74963b8e9ee6
SHA1 909b3373ba2cacb3895b32320e4e62dadb0bf36a
SHA512 4c797225f11dcdbba6f05c62f85b466de6c01e7ac87768c64b6c543ec02e529b3f6a53a9099479f44cbf6774f3049c2ac1e23788a78e41defea187461acc405d
SSDEEP 12288:MoChVPxOydK5KOWo9XGiTxKgmZ7GJCtk7NKhjCnm:M/1xlXOX5GUxKyCDC
TLSH
T10D159400DF807F75CAB657B142E3D47A6139024B2DA696039270BB2A6C2D1E76ED7C4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7c8a217e540d53b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c7c8a217e540d53b_0
Size 143KB
SHA256 345d603acb74116ba830f141d1fb3a5ecd85a4fd9bae487cee0a2cee626bc8ea
MD5 176919f2376678470043a251c9ee0421
SHA1 92e9413db4902017730b9c5761affae027d6d94b
SHA512 08ce4b7e987f89acf3940d975e289c2cd9e4a730d599b08b3992c73f636996eeb9807ba255c10cd7fad387e94940b6f3edfd45796d98c38f37889bf65cffd8ab
SSDEEP 1536:O+ivLxA91S51x8B2oK0/3wZXxpRaWOdQ/hFa1olXuPn6lfFQml06pfm:O+gLxsk8B/3uBp5hF0oS2fFQmuif
TLSH
T19CE3B6113791AA46CE3753F551638A17733685483FC3A33762F5B7392C283E68E4A89B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce0c01b067087621_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ce0c01b067087621_0
Size 28KB
SHA256 595c7f4d5d0e1f31cfd48d89ae1be15bae84d80e6dfe68d0e2809a568a17416c
MD5 2265dc62c820d75fc7e11be87a6e2c6c
SHA1 bca667ec5bd5e52f2a49e740430a81010e46e318
SHA512 1eb57221f5846118f95edf337b91a7e453ce1643298a583eba2699d2b9d24584fa9d2aef774d6338aa9fd927241fdcea682d97921053f79b3428b7ccc6a268f3
SSDEEP 768:MSIpN6Q+w5MNf69pXxNNXU3NWFy+X5mJg0CU:MSITNX560BNDfm1j
TLSH
T188D294D62B95BD39CA2A13F402919A16B33589853FD3E31B30E113391C95BE74DCA98B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eaf1643a3fa3b11b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\eaf1643a3fa3b11b_0
Size 260B
SHA256 5ea87b75df02a20c2244d03839ad051ebd40b0f143003c275746c599091251a0
MD5 9d5302bb0d2a83c0b1e066b95386410f
SHA1 61ebb76283431e97f907882bb66b4043f7d77bee
SHA512 f0528f59cbf982f5efb1925a452f6211ec9616e14118d6df1d5d8bb901d0171719d39735a62738eaea846c5be224a377cb17a3dc7a92d3d654ea6794b4d5640a
TLSH
T17AD095FFB47055C5C5244FF09D97312AD20050A4106DC1F5C017507311001E1E25516C
MD5 SHA1 SHA512 TLSH

Submit Download

fd3b58217fb7e755_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fd3b58217fb7e755_0
Size 282B
SHA256 a9d06fb2d2c9f9d5fcbdadaf856976871a852dd97ae0e8d5e40cf479c19a20d4
MD5 1ba6480b2f6ac166338bc0a6f5c6d3a5
SHA1 33e3311e17b773b2d9459289837abf06dceb6c20
SHA512 a075c07c80517d1a8864ff6dd85cdbf85b4a67221509f1490a4f9a69a42e1b9f984f3c0e4d8f9a534902eeac6ff76df66ef1e0dd23781e7998b8f742408f0c78
TLSH
T168D097D32928B013FD8B17FDDB83763AE72483282A9FD0C1C54AF06BA3620B167D2011
MD5 SHA1 SHA512 TLSH

Submit Download

fdadead028e41343_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fdadead028e41343_0
Size 98KB
SHA256 9f9fedd2086d9db4edae3b4811a594c569a18118d564a92ecb5d3a504d1058a3
MD5 84101f863f8d3242151f7ee93c8caea1
SHA1 918287129c7011cab027285f88012da4ade26caa
SHA512 a60cb1c36166204978cc360134b2a04df705f0dab347a5298ecd954192f578f37f6aeed145ebce437c3a8686c8a519b25b521ee1baceda3414081ff8d5342e12
SSDEEP 1536:OQx9pOIorCnVktZklV1VIT0I1x+7iAEluQuIyybq5z6zFB90OR:PxOIouiJTp+pWFB91
TLSH
T140A3EA792B60BD94CA3617F041B38D17B73284096FC3A72FB2E452363C4E5E51F9A94A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\000003.log
Size 4KB
SHA256 3128a022777a2affc8361bedf6804e2dd8886e8bf35b0f1501c607bbcbc38969
MD5 ceceb68206b9e65e23c36ed9122b9e7b
SHA1 e058681e3ee55b98edc7fed95c712119cb48ebd8
SHA512 201d94d3126c9ced6fdef0161fbfd3e3de832917a19c4f35aeb4b438d64a5ac1ddfe35613e75d8f9aec0fbc18888c5e11633cbf8d91baa5436e8eedb07e2b4f0
SSDEEP 96:BKXGnS/UF3ZF6jI3kru/nvuWUNv16obbEclWNayo:BKIF3ujT9vPb/QN+
TLSH
T13EA19D2FB5109FA3CA1C423249261FC85BB76E80BEC4814BF1C0FA7ED7B26405C71692
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 4e9643749db85b22c7685a036eba364808edebf991c5670d09d76516bd8a864d
MD5 89053aa354b020beb42f33a8cbaba519
SHA1 fd39e8561dc1e8b43eba486d793b30b4f9e5449a
SHA512 78b7a92510c952db4b7290cae5d6075e4a138951ce223c16bec2bf2999bf9895ab435fda00ac8059f91b12e06a8915f4f73f598700f0babe9e1d7a18c17dedef
TLSH
T18BE0552889CDC22FABA0100360383F0DCAB33E1E92CCFEC10F0288C2A044010B0BF170
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 b329d5c29da6677e7d352ecf5c5f44bd05667a82bca6bafbb2979c468b9428dc
MD5 3f24b5cd6d6f7573477613509a5d7d3c
SHA1 a9f2daaedd421152f37a1a732b5ebdabe4603321
SHA512 4403cc87ddca82948b00319c2c89a099ed53856eab9770efc8145c8188ad0bc3770dd2eae5212f2e3e55c204dce78c1322699097abbf6168b669e0474b181636
TLSH
T195E0E57888CDC62FAA54525362787F0ED6B27D0E96CCFEC15F45A8C2B182054A5BE570
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 432fe898e50cb34a5c5328d61655e08a995624e64514904d610a9d7706551c37
MD5 d2504b6c73cda7036b0cf40c4039abc1
SHA1 ba7725876a5d83c7b98b03f8cebafd3c87b09213
SHA512 e4beece33baf2022842a991e7b12701ee8bfe886f68a7615beaee1d1a3633e9b19f8ff63e0085254d94ee5dd51523879b3c9bbca83a3204364703d9d7890316e
TLSH
T1E6E0556C88CDC21FAA54100360783B0DC6B23E1F92CCFEC29B00C8C2B682010B1BE570
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 7c5e8ea4f50eb1410d9f248f5f3da94bf9b473a9969a1c4ae8238749868f4a16
MD5 373f9dabcc935e3665dcbc5fedd56278
SHA1 19afd40afcf66d76e32e433520ee9990781c8cdc
SHA512 7f54076297205174ecc1a338270f762d1a7e1975ee657a0d75de7ed9682a51759f96f97a3a373345a679e6f61d9c68ac6ac787c4525403728fed36dfa32812c9
TLSH
T118E0A07C888AC61FAE5421536138BF8ED6A22B0E968CBE815B45A682E141054A1BE9B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 f252a6fc79cc95c1f4783e4291b21965bfa691a80f3acaf77155ae4a7ac2460b
MD5 c7db9bbc6f1e131907a20ca70b044093
SHA1 a910c9916ae14d6771ab44b1ac368ef0d59c14e4
SHA512 30525c104fbd869b2e56370075c03f73a47953a73f2b4a59ad52f85c468f4639cbf20375b2ed04078a17c6370ecd2ee8c0e088d5f816f80bc44a6cac970dc91c
TLSH
T19DE0A0788999CA1FAE64115361387B0DD6A26E0FD68CBE819B45E486E242054B1BE570
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 f1d347e7135d6d91663496b67659e15c4c208646d77902f87d758586ad9eb892
MD5 012bfceb9991325010670a905e3efc7e
SHA1 df31fe63691ff769236f4c9535447610e145a6e6
SHA512 15a6f07bd0763a7a28924b4909004ed20957a302922fdafb13939605e8381a1588bc416ab4868216f9a0c65ddf3d3628a15d51ce6110a48c8b0a214cc9b9faf2
TLSH
T1F5E0556C88DDC21FAA5011076078BB0DE6B23D0F92CCFEC12B02C4C2E640010A1BE170
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 f7409dc38e4d85f25071472bca5a68ab63f9a50155b023240144e15262bfe48c
MD5 77491dd019ba34a61af5e25fccb5aeb6
SHA1 8889e3bea2cfe762f6b920cf6a4b7b91a2a08480
SHA512 f08a3c6c0287dda6f8190a04600204477e85bcae474c9e7a3bddc6fcc22291d8546884e94205dd76352436bb8269d553b81d14ab8d50fadc38a1935d5295adf7
TLSH
T12DE055AC88CDC21FAAA81403A03A3B4EE6B23D0E92CCFEC10F0285C6E640010A0BE170
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 05e8bae3f8e95ee402c782c5b61e7c2fa1a4f5959b0d33be4e335e97779d1ab5
MD5 40373aac4ae2086ccf62a8d63a02464a
SHA1 7e398a08cf76ceba065af537527499427e910142
SHA512 5035b124bcc7da4cd6396f7a67a8fc72e7c031fae9aa5618807962f577762c3d89e956185df3550a1c108263a85a2bb0de89b32ae5db315bc1a34c44eb9ee8e0
TLSH
T161E0E56888DDC71FAA5421676138BF0ED6F23A0FA6CCFEC55B499440E145054E1BE571
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 5525e63be23947c7b282a3aafaeeceb78c7b4249089875ee8e0f18b9c24d4931
MD5 957eb521f5386f38dea189b68b5b2af4
SHA1 dccf7f6cbd8a5ffab34f58a9b97a04383fcf4f4f
SHA512 0b881965081ea909d4cca34caa9669455fbe5a1789ab4a84e8dd36a7a4f05a8ceaac136a244216fb09ba9f5c5277c459b32ccbd09fdcae50bc328d0d343fe496
TLSH
T1A2E0E56C8CCEC62FAE64215767387F0DD6B2790EA6CCFFC15B498440E142064E5BE971
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 9f2c820993850453852df5ba81904229a096eee82166e84604636e86fb8e5866
MD5 ded621eccb012aa89a75a5115eaf11f0
SHA1 51cf2ac34a32948e6332951440f8bfec810467bd
SHA512 952da33a219ce219143de2ff6d813123519003f678b7a77b6932dc9e346e47ed22e364db9b5487ce688b2e970646cd8cb84e1f020d20c272a39a1e281298856a
TLSH
T199E0E57888CEC62FAA54125761387B0DD6B27F0F96CDFFC15B45E8C2A141054B2BE970
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 d62e94d58c6dea4d1bd0999a6bfb9c3ca8cd848a5b35068912d3618892057ee2
MD5 6549232ff26549eb152be2949f56fb2c
SHA1 7f41569480aee00a1c40d562380f3fa1d3e6b419
SHA512 7ddb08e8c06b587686c55c72400826f90a017c7de73096f0d6a09855ad6ac6fdee5244bb8423a910241efd76bfe85adcb43feee6840224a7cafc46ba8b92ea6b
TLSH
T1B0E0553888CEC26FAA50100360383B0CE7B23D0F9ACCFEC10B0088C2B282010A0BE971
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 30037eb53337b7272335776c63f1f8f4459efb25a452f61e2031f806611c3a1b
MD5 9e121bd5523e7182d3d1bb03da266c73
SHA1 2c175b5077985014c284a990f81501803ec3e4d8
SHA512 035d793f38354ab66468b65fe096890bb032518904c7ae28f4f84f3a847712f6d85ad836d29238f12f89f06183c5cb58b2c859c412ac706d47cc3b026975785d
TLSH
T148E0552C99CDCA1FAA50500362783F0CC6B23E4E92CCFEC18B0084D2A042018A0FE970
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 b6267becef1788cd5badecb005f73f6d172bcdb984b7c2f260977e170b8d3999
MD5 37cf72023ae47391505d805c2a4a4df1
SHA1 7fec6534abd9a9a016da6c0669966fea3d2739b8
SHA512 5e3877faa2db7abe80e0e5508143576155087e7d4df764bca4742d8c4e2e8c46d1dd6e4bef8628dca80e8c10f7096f06897c1a8e0a128b01f233b63a1b4c4451
TLSH
T11AE0202C989DC22FAE50100760383B0CD6A22B0EA28CAE810E0A8840E046010E2BE170
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 03d2556c3ddc68c984604bcc04ae56fc4ac5f31958c5f2cc471a71a0aec48606
MD5 f96a1eaafb549203ab8cd513529d2a83
SHA1 1c6bb9869c8d0236e06d94506d365b8a08656c3f
SHA512 a2e573cb81e55ce516048470792c30427328ed8ce5ee7f97275aa7663e71652a669d9a3bcff95e2356d10f0ee952a4f84465bfc860eb8603cc4ec66df974eb7b
TLSH
T1E6E0A0B88889D62FAA681153A1387B0DD6A32A0ED68CBF859B499882E141054A5AE970
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 3e0acf8821df319a784001b92b6df752665127b327a0b208bab06f491ebb60c3
MD5 24fc270bfd4ee0ac16390861b5e328e8
SHA1 1c94d8ec6aa160bec9b6fb979a11d609278a7bb7
SHA512 6088f28cb3b84e81522c5cbfab90f64703259f95ca9482f4e29acbf3282c989617072e23e03634ab0877a8b71b7b0de300ac940f41ae740073a59062a621d3cb
TLSH
T10FE0E57888CDC62FAA941153A1387B0ED6B23D0E97CCFEC15B4598D2A541054A5BE574
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 408B
SHA256 62595f78012020d5dcc52586008c2fc2fb81f29727b3ed1ab0a9c3f4081a4fca
MD5 9f6ca98e92d2bf4507ff1df36870113a
SHA1 297daa9f87b6f5d66fb325334010ca0bd0b8d9d6
SHA512 5ecb98188b4e5af15b452cabb360d7c81a71318ba64355375a58306268521deea842b06be3bb556a7d323d98f0fe8a77b5b9343718de32abcea66b6129817837
TLSH
T1A8E0552888CDC62FAE54200772383B0CC6B23D0F92CCFEC14B0898D2F041410A0BF970
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG.old
Size 405B
SHA256 f94df27379ada73b4684f9d408fb2f3b1890e37e9b279c49a698cb34ea31afde
MD5 55ee41d075625f6278f84ace807a19db
SHA1 6ab643a4bdcf1acfb8930bfac962b5574f8c3fbd
SHA512 fa627fc51c3d901752cc79b8bc306fd337e5579f4734d79f96bce2831c4a1f98fc5c0bc1dcd5b51001cedaf46b6def096174dc17bea41b991202dbb79620d166
TLSH
T110E05C2889DEC31F6990210790383F0CD9B2390FA2CCFFC10B058455E642010D0BE170
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG.old
Size 408B
SHA256 393edbbe3aaa39cae780379930e66f0b3816abbcc90ea925a8a9d418f9faf5e3
MD5 d7e17fa9882eef46ac06f5a117449522
SHA1 ce0cba858d6c8556dcdcdcb95ca3b01d90df741d
SHA512 b61f31ca48d3e17ebd17f3202b0c105c0e0bf9328929be0203f518aee877f7dc1a0e740ffef972b858c509624b3aa35d3e106c8a57a48852568897b3e6e2707b
TLSH
T1B7E05C6848CEC21F5A90214390743F0DD7B23D0F92CDFEC20F00D4C2E58521091BE1B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old~RFe5afa7e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG.old~RFe5afa7e.TMP
Size 367B
SHA256 62127c77c68f9dcdf00aed8f5c6991d27166e9196892d17c75c8566593e915cc
MD5 d6ae174c2338cacf4aa9edc71d708f44
SHA1 d6b7aa4672761675e488dafdc8f849a705d21079
SHA512 1a79c9b0ee4d525c900c8e6c8c5464a741ac3622f3df26c5477287d65d7fcb80dfe3a982ce15b01b20ddd48abe07bf5b6955923c4c8de8bf761f9399e437dbf9
TLSH
T113E0223888C9C61F56A01692A034BB0EE9A2290F96CCFF854E81E845BA8604990AE1B1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 3f3338fca2c8121ec0dfb6f6ceafaecbdeab7ef7a6a54fb618dcdedb93c8e92e
MD5 6a4e405ed89d141b76eb026da5e920d4
SHA1 39d1795fc8fe037df4401624a3150959f51a4f16
SHA512 0ccf6e27f0a88417245342bdd920e09a7878aae2677684982dbead6571dad0566eafbf5b9cfdefdb3b7bcfe550f6d37fd0e5ceebf8698d84fb104aa84034667a
SSDEEP 96:DaOxPxqxTxdx6Jx/+xMFOzBxwcXiwBxjx7Mx9Ex9Kxixyx3Bx9zxlx9DxRxxLxxk:DJxPxqxTxdx6Jx2xMFO1xwcXikxjx7Mk
TLSH
T171C14AF682E4861ECD1152F097186E1BCF2D0935466C7DAA88D4FF8B93D20B2E34168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 6d1b96c604c24d6099a6a378dc0dfa0f0084fc4101ea20b6f5d0117ed26151e3
MD5 5579ad950e7e75925b9c14dc52b38b5b
SHA1 edb75256f42b093bcfc6a94710294bc62543ebe3
SHA512 b703b14d49360bf1eebed3d8ee7e191b121988c16d44644c91dbded0c463e8601d91f22a08578649dd785dfd4c98468d02166088c5a1bb72e04460d732cb06ae
SSDEEP 192:sxRIRHyM/jK1Ml8wCj/fRssghZdvazoA8pZZ/g6+WNAzBfe0YZftNY3VxKltJ7Gz:sxRIn8j/fRssgvFz/5yfefa+zG
TLSH
T1AE62E9166938697BDCDBD21CFA51BF63D6F9146391901E44AEFC8A1C00EA7ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 74c0a772f6ed62e18e1221eafee8ff4bc445f877c180bc49324848f1dc222702
MD5 ad52f4fccdbdccf0347c629a4e063a8e
SHA1 046fdbec36a65a779d192a224ff3038e337154f6
SHA512 9a942cdb786ed67ccb3ef0e22aa989ad0a5f0578ce916ded04144c2c8d59dcbe865dea2af1fa42a59fc64a940215f2c829cfab95d9f9260a3f83a6e002d919e6
SSDEEP 192:sxRnRHyM/jK1Ml8wCj/fRsZghZdvQzoA8pZe/g6+WNA96Ze0cDZ/t3Q3GxsltJ7R:sxRnn8j/fRsZgvLI/5LZelDkbzJ
TLSH
T19E62DA15AA38697BDCDBD218FA51BF63D7F9147391901E44AEFC8A1C00EA6ED211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 440ff51b9aa006369b9d9c1a584c37c70ab98faa06ca5e37bb3506cabeb16377
MD5 365a659824afb58563e5551d1e923571
SHA1 952df595f02795e212feb6ae0c948be394fd9c71
SHA512 67ac365ab1a92289b2de7f64ffab1f6a4a417230ceb283fade8e346cc491c9e45d54c746e03942ec86facb42f6367a51d248a43d7a0f4234be09c9689806f2fa
SSDEEP 192:sxRnRHyM/jK1Ml8wCj/fRsZThZdvtzoA8pZj/g6+WNAaRrbe09ZP9tDk31x4lzJb:sxRnx8j/fRsZTvi1/5rrbeyOsz3
TLSH
T18162C916A938697BDCDBD218F651BF63D2F5157391901E44AEFCCA1C00E66ED211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 41b337267fc4b09e8b9acd29acd06e8c1710d843f9f20c6f49797ad8e5e8d31c
MD5 b26d7a51febe9305861ecde173cde959
SHA1 a74ef02d782883b7030bd791b9489d43cdcf6428
SHA512 5651202125312ea0baaf521725e983a011b865a681c1696b62e6fbcf156edb59f0927eb4495b02397329719a3bbbacf004a26f9316193e8cf682bd5d21afa7c0
SSDEEP 192:sxRnRHyM/jK1Ml8UQsCj/fRsZThZdvszoA8pj4/g6+WNAmFhe05ZZitHY3HxIlzN:sxRnxqLj/fRsZTvP0/5HhekViz3
TLSH
T16072D81AA938697BDCD7D219F651BF63D2F5146391905E84AEFCCA1C00EA6ED210381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 de01f960e30149f3a09e310a2a8e02946395f69463f0229c81eabc38cf05e2f8
MD5 d032c466be42aba42e909968c7685645
SHA1 7169ac3d98260ca170681a645910cc11ad2be0b3
SHA512 b51f3e451445445b18de1d37a78d5e39ec084feba5a0b53936ea514cd24ff7d958dac35e13e3f419eaf653cd762bdf7a6edfc718d964ab3fdc6d2f69082f0371
SSDEEP 768:0xCyas7pLuL7ijWgbrfK18F1+UoAYDCx9Tuqh0VfUC9xbog/OVmYzHrVAYroJVNN:0xCyaQE7ijWgbrfK1u1jaNKHpAjJVJl
TLSH
T14EE2EC7B680CCB7E4F404ADDEC297EDA6DA802CF96D8CD5447EA880C03C67EB51165DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bd7b26334ba9c62656b98067f1ee9ab90e0af8f502d702d3ea72c519c1230cf5
MD5 2c5b1a8b2d1cbeda129be3e5c89dbc73
SHA1 c8bbbf0fd28ee2b6ea58e25516416905fa03af05
SHA512 65305ad707ec695b1bd5ca43d72a648308d7e7b0ea860d19cbef7e8c7dfc4a3fd4a1a98a7361094ac6faeef43e47645e367bace5d900468232aa45e0a05e80ad
SSDEEP 96:KAVhWKKca6GYK/aNmX6GoAA+GQBlYm+KgLYc+kemJM2fg:CF3+9g
TLSH
T14A9141A2717A13427CBE690891A4D61AC69275F33018E92F3BE900660F7BF414DFC9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6d7b02f4eb6124f9278d24d43692458a7a58b62fc78e4ecb93674ad0afeac3b0
MD5 da815fdc75d099936c1b541658bf3e3d
SHA1 6b4a5228e502c373e568f2d998105efc95db61da
SHA512 1d20592f28074a735d0879b76863667f91f72c8dc1ee81181af022b3827d57e5519f5b4cfb0609050e705b6137adcd5358818c4f58cfdade38f8ab5c998ee4d0
SSDEEP 768:arv+4UNbdl3MPkKL2+jF669yrqUjWiIwwxMRSUiler:absbX3z2jF66INWZTMEUsQ
TLSH
T10403CE35AC589AB3CDF2D28672437783BFB4509396C40B98CACD670D469B4DD2343A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 323a9d471846fd92687280f4d6d1c0ded347a95f277f03491e91066ad22aa6d4
MD5 9d41e19def10442a3fce03d2f066a754
SHA1 cfad90c2d8f3582ce978ca8b0a981fb0d142d339
SHA512 7e8cc4091ed744162a08f33d1f1ecb260ae4487cb6f6b016454ca5c01d05f40a9e9864ef185f6ab1bcf9d749875576d92e05b50fc913f36b81f211a35c0918f4
SSDEEP 768:prv+4UNbdE3RgukKL2vjF669yrqUjWiIwwxMtdM:pbsb63RmXjF66INWZTMDM
TLSH
T15203BE70B868AAB7CCF6D681B21377C3BF74149389C50F98C9D9970D094B1DA274B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 b5d1fd594c33031bc7fa094ccad3680476d8dd6e28a636b4f5a0deed4f25a522
MD5 65441d6bf66190cdead9fab5c90060c9
SHA1 307d7f81aed40985cc06b6d9a27919cac597f2af
SHA512 919f03018dd4eac84255b6e7f01d5a3c9314a2e98c6f563ebe4ec7eeaa3f63259fb80a710bf7c1f234b8e4cc012a59d66a8c82619540f0d4fd6a6835c24ee5da
SSDEEP 768:fz3f3SkKL2njF669yrqUjWiIwwxMtdfb7P:fz3fJ/jF66INWZTMDfb7P
TLSH
T139F2BF70AC989DB78CF9D381B31237C7EFB450A396C94E88C9DC970D09476DA274782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 6591057bd2c3cd7e799fc0019f8a6c2eaaf977121af1b4b56de65ee1e8347886
MD5 d0ea0b40acdbe16089021f182d19169d
SHA1 77a60364e7a3d4153483ee837f390787c766e0b6
SHA512 d6e53c668d8d83e786c3011176b0fd7d175a4a5c20f2c8058952b0ecb71f2bdd1e6b15def2dc0637038de342ae13fbef16ba87355caca425df392a503a873185
SSDEEP 768:VFQf3QwgF9XmfF669yrqUjWiIwwxMtdfb7P:0f348fF66INWZTMDfb7P
TLSH
T18A036C74EC94DABB9CE6D7C1B3127686EEF010A386C99DD8DAC89E0D04871DE1747C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ba5b4516ed76adc8c33489263d8c155a7d74f30fb52b06fcdcd8179ad78fa949
MD5 853fbef286698f406dd3f05faa1026cd
SHA1 c9de1e91000b5f9439b80a71df33504cacb6a937
SHA512 937f5c9de333076bf486c3a5a919c0f94c26dfa891f2f18c6e498a5cb9f319886812009aa28564f2484f80f367f5f4af84b4714f50768cb4094ddf1293140be6
SSDEEP 768:jrv+4UNbdl3jn4kKL2bjF669yrqUjWiIwwxMAdUiler:jbsbX3jvjjF66INWZTMsUsQ
TLSH
T1D603CF70AC589A73CDF6D286B25377C3BF74209399C50F98CAC9570D0A4B0CA2747A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b27e52dd-7343-49ab-8387-993b1bc8d76c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b27e52dd-7343-49ab-8387-993b1bc8d76c.tmp
Size 34KB
SHA256 63d2eb1bae44eea133bdf5aa74b534798272a05c4b8074ea0c0558e352408de7
MD5 bbcce50969ac031e7a13577f7e53742a
SHA1 0c8a74a9207a71510f998ba302da36a938d5872f
SHA512 9590ce3bd35b0b8957ff2b97d605d4f708d3daee6552d43d719434fee68893f0c541fbc13f470a99f45ade86743db0465c6b905cd8e5d27432ae7135fceb61ff
SSDEEP 768:rz3SaGkKL2njF669yrqUjWiIwwxMtdfb7P:rz3SI/jF66INWZTMDfb7P
TLSH
T1B1F2BF70AC589DB78CF9D381B31237C7EFB450A396C94E98C9DC970D09476DA274782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

96b1e1fb-406e-4f19-b89b-f35e82e88b4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\96b1e1fb-406e-4f19-b89b-f35e82e88b4f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ILInstallUtil.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl8EA6.tmp\ILInstallUtil.dll
Size 772KB
SHA256 37ad075156c508f9ecad57bdd8c00aaaf2f02e2c7291853f411799788dc25259
MD5 a63a7b6e7969179c67cdd1f7db3fe622
SHA1 c35aa94d212bfbb4e9f868d25b9fe5b8bd6bd801
SHA512 c0fe0d2253a633ea5156359fe33f4fdb02244441ae21631038b040300a0079ce4ada49face2f5f757cca5fcfb51320221b720e0a71335e6769f2ebd9d705b8d8
SSDEEP 12288:56oo4BP4c8/wR70erVG11H8ZstRk3+zDd24KafE5H:To4BPe/wR708G1H8ZstRkSDdP3e
TLSH
T10FF43B27B245617FE47E0A394A73E9509C3FBB61A5938C265BF0448CCE6D0806E7E61F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl8EA6.tmp\InstallOptions.dll
Size 15KB
SHA256 f34385901206a3952fe2724edb3b0b123fd897119c774ab68c8745de6662d990
MD5 998189882c9f1be220c9faf0fd2bde15
SHA1 787d50c46c9a2a48565f684fabc7503aca8b0493
SHA512 e0c52ad851b476e7bcbadea8f993e5c6f9f70a9b46e2aebe8ee353a372b0bd5af95241240f880f49b9d91d240a4a2b7e7d2b7c8a18ca1654e607fa8d2772dfd6
SSDEEP 192:zkByiog2tkjvs9/yb2GC5E5RatZzMHjphLAykyc5MT5/9v9GwBCMFauVizLY:znio7tgOO2GaW2zcjpAT5Ot9lVBZaL3
TLSH
T1AC622B117FC610B7EB9226712BFEA7139BB2B21018D19C0B8E7339462D7A605EF35652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl8EA6.tmp\System.dll
Size 11KB
SHA256 c4aaf80e3990185eeb5ea56bf841dbf5f3d02269d715f3bfdfe8b54aa797a7b9
MD5 24523fe14bb9ba400a3950016b187915
SHA1 6ec152b4e4ac04038d4608a8a206070185116036
SHA512 ae73351d27109187f7c4e312bc30a165202f29d74c65dd0feaee75dab72b97d27c6482b1e95771063afec7e9f2ca03a27a11cd25e39228072b69c33fffef7257
SSDEEP 192:cS8LqFZBOtRG/+VE6HwIobhj+PJu97wI88QF+wnY5LL:xZQtsh6HQdj4Ona85LL
TLSH
T163324A0347A081F1E151833C08673B27BBB9A72566F08C23AFD35881BD596D6BE79713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl8EA6.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserMgr.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl8EA6.tmp\UserMgr.dll
Size 23KB
SHA256 7696c255014a543f720e189ab3fe48f62fcf43435465062649c96138eedb222f
MD5 9210597fba3dfab3c69b1eb490205419
SHA1 6e3ca39043756ed1cceaf2d4853e7cb6be1c64cb
SHA512 4877daefdd34725791fba7c8cc2d85c4e91080ca7787a71ee9ffde71704ac40799b891f03d1f1805a31af6ddc35e335f74c9d620e87d517670a378c001cffb06
SSDEEP 384:qy822ev7imqsdMCgfwnvmau3+zK8E1Iz6P/RdJ3AiMtDVeNvOCcN:q5TehhMCgfwnvmauiK8Eg6P5TQXBe
TLSH
T1E2B21A01728D4081F216BA3B39E6DB379BFC73B5571988C7F386270B61539C2A978236
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioAllUsersPage.ini

Path C:\Users\Admin\AppData\Local\Temp\nsl8EA6.tmp\ioAllUsersPage.ini
Size 1KB
SHA256 448e294ac9c25db1edc08b0fd89f75e714d2cf502199ffe3192de6d48566e0ac
MD5 9df7c0e11e3ca147592b88df4ba7e9bb
SHA1 ae512e76a7db0af178d9df3fb4ce94a9a93bcdfb
SHA512 e57f3aafb2ca45acc89c30c9bd0be4e1f2632de8e39e1c7fe896f74c843049fb57c8016a2cf04e040dd071d16749381cc8ccb4c4bd9d87f74a9f58b83190290e
TLSH
T15B219D133EF90515F0ABB60DEBF54039A7397842482DC90EC1D20A0E44FAA80862BBDF
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsl8EA6.tmp\ioSpecial.ini
Size 1KB
SHA256 d076e1e40a00943f57bd36fbda52ded21fb13e3d13f142503d0cb3789f45f0f5
MD5 0b353a66a24246af43741c38d265b9b9
SHA1 d82bd8a4a6fcc514eccc0784e4c0d80b189777b0
SHA512 eb93b67cef0027f77a725db8c3e50f163f429523e85ef9a4457c4d89a5dc9d593098153916c482cfe625baffa5850ba70eefaaef4ffa2ac408deb031628fd65a
TLSH
T1AA31D1037AFC1614F2FAFB54FFB541758B3A3C06A838C60D41C10A0E09E6B408963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2340_979956605\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/252-15-0x00000000064D0000-0x000000000659D000-memory.dmp

Download

memory/252-61-0x0000000005BB0000-0x0000000005C7D000-memory.dmp

Download