hxxp://google[.]com

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
1049s
max time network
431s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 16:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260925-vehsfa1fka

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5100	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{E94FDB16-A8B9-4909-8706-366D8FC13CAA}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{2FB1B109-D3ED-493F-A201-884979956822}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4996 wrote to memory of 2992	4996	msedge.exe	87
PID 4996 wrote to memory of 5100	4996	msedge.exe	88
PID 4996 wrote to memory of 1840	4996	msedge.exe	89
PID 4996 wrote to memory of 1840	4996	msedge.exe	89
PID 4996 wrote to memory of 1840	4996	msedge.exe	89
PID 4996 wrote to memory of 5092	4996	msedge.exe	90
PID 4996 wrote to memory of 5092	4996	msedge.exe	90
PID 4996 wrote to memory of 4396	4996	msedge.exe	91
PID 4996 wrote to memory of 4396	4996	msedge.exe	91
PID 4996 wrote to memory of 4396	4996	msedge.exe	91
PID 4996 wrote to memory of 4596	4996	msedge.exe	92
PID 4996 wrote to memory of 4596	4996	msedge.exe	92
PID 4996 wrote to memory of 4596	4996	msedge.exe	92
PID 4996 wrote to memory of 5068	4996	msedge.exe	94
PID 4996 wrote to memory of 5068	4996	msedge.exe	94
PID 4996 wrote to memory of 5068	4996	msedge.exe	94
PID 4996 wrote to memory of 1976	4996	msedge.exe	95
PID 4996 wrote to memory of 1976	4996	msedge.exe	95
PID 4996 wrote to memory of 1976	4996	msedge.exe	95
PID 4996 wrote to memory of 1812	4996	msedge.exe	99
PID 4996 wrote to memory of 1812	4996	msedge.exe	99
PID 4996 wrote to memory of 1812	4996	msedge.exe	99
PID 4996 wrote to memory of 1348	4996	msedge.exe	100
PID 4996 wrote to memory of 3620	4996	msedge.exe	101
PID 4996 wrote to memory of 1348	4996	msedge.exe	100
PID 4996 wrote to memory of 3620	4996	msedge.exe	101
PID 4996 wrote to memory of 1880	4996	msedge.exe	103
PID 4996 wrote to memory of 4408	4996	msedge.exe	114
PID 4996 wrote to memory of 4408	4996	msedge.exe	114
PID 4996 wrote to memory of 4408	4996	msedge.exe	114
PID 4996 wrote to memory of 1880	4996	msedge.exe	115
PID 4996 wrote to memory of 1880	4996	msedge.exe	115
PID 4996 wrote to memory of 1880	4996	msedge.exe	115
PID 4996 wrote to memory of 3544	4996	msedge.exe	116
PID 4996 wrote to memory of 3936	4996	msedge.exe	117
PID 4996 wrote to memory of 3936	4996	msedge.exe	117
PID 4996 wrote to memory of 804	4996	msedge.exe	118
PID 4996 wrote to memory of 804	4996	msedge.exe	118
PID 4996 wrote to memory of 804	4996	msedge.exe	118
PID 4996 wrote to memory of 792	4996	msedge.exe	119
PID 4996 wrote to memory of 792	4996	msedge.exe	119
PID 4996 wrote to memory of 792	4996	msedge.exe	119
PID 4996 wrote to memory of 4888	4996	msedge.exe	120
PID 4996 wrote to memory of 4888	4996	msedge.exe	120
PID 4996 wrote to memory of 4888	4996	msedge.exe	120
PID 4996 wrote to memory of 3184	4996	msedge.exe	122
PID 4996 wrote to memory of 1528	4996	msedge.exe	123
PID 4996 wrote to memory of 876	4996	msedge.exe	124
PID 4996 wrote to memory of 5572	4996	msedge.exe	125
PID 4996 wrote to memory of 5572	4996	msedge.exe	125
PID 4996 wrote to memory of 5572	4996	msedge.exe	125
PID 4996 wrote to memory of 5728	4996	msedge.exe	126
PID 4996 wrote to memory of 5728	4996	msedge.exe	126
PID 4996 wrote to memory of 5728	4996	msedge.exe	126
PID 4996 wrote to memory of 5472	4996	msedge.exe	128
PID 4996 wrote to memory of 5472	4996	msedge.exe	128
PID 4996 wrote to memory of 5472	4996	msedge.exe	128
PID 4996 wrote to memory of 6020	4996	msedge.exe	135
PID 4996 wrote to memory of 6020	4996	msedge.exe	135
PID 4996 wrote to memory of 3896	4996	msedge.exe	138
PID 4996 wrote to memory of 3896	4996	msedge.exe	138
PID 4996 wrote to memory of 3228	4996	msedge.exe	139
PID 4996 wrote to memory of 3228	4996	msedge.exe	139
PID 4996 wrote to memory of 3228	4996	msedge.exe	139

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffc6bfcc188,0x7ffc6bfcc194,0x7ffc6bfcc1a0
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,345410892612418219,1331744414356281262,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1832,i,4376748669194440001,11835921773445243298,262144 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,16235238916726576019,11477910821245333929,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,5096822168711240240,10267352813777682753,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,5831086883808371692,2700235613697779487,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,10170172336797594234,15865394159338312550,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,7972361010446679116,3634341231881499070,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5124,i,7466730285997343688,8736993144795796302,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,13830713519635453242,16022318658094953652,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,17727998291074621980,10985151715723770700,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,5879768041116944407,118259360924934321,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,5879768041116944407,118259360924934321,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4920,i,8498956190746236716,3239879873500380298,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4524,i,7493224099539814148,2574245102205855080,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,18278488528025225221,2693317932175033442,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,1932059775379453152,16104719535620879081,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6688,i,15754324459476533089,8168884532887066723,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5244,i,5078553619280148256,18131929541114765831,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6372,i,12050529848834825854,5670314784703293336,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,16793735103019180453,9407937055328802714,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,13245606743085164052,7292113084335021348,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,4621096088962311081,14537954624799893050,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6948,i,14167522642182073178,3792679365110546638,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4352,i,13771353902646706482,202618712785981404,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5936,i,14914953491520266164,13848559295175494,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,3590802230294054012,6023705506403160249,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7240 /prefetch:8
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,12585877232878531127,18328013729781365739,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7420 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5552,i,15725366756703196423,8161259652902523889,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6016,i,10092613956094407755,11791855593706793158,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7624,i,5435173323477177509,1240932627550460007,262144 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7216,i,3054568619348377729,3012578458255216342,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7544,i,14790327455760340879,7190596857815333738,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5344,i,9007950791415380671,10765785642698384032,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,7770045623787673843,870302427221805100,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:8
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7760,i,6950480738538881047,8966045484802951663,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7364,i,8620378931964557125,18085942607846508653,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7400 /prefetch:8
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7608,i,2444480885772921283,16981534534583586154,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7872 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7864,i,2562569515081379314,12133443980814927689,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=8040 /prefetch:8
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7768,i,11875652218103560610,5114435629481433884,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7748,i,9780496380747752563,729337104091715813,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,18431638953866225021,320835143272979218,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7028,i,4178010525462107130,3134074474622179889,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8120,i,3184074520948373132,4972761922395374141,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,5711531450064850822,14984406317131358126,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7040,i,4889794338680346566,12545999936232555904,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7996 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7072,i,5548289951564245780,9077248734889808417,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:2
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7696,i,4624718845393040118,1335701077937858908,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,10099821489307776250,10517903529075420328,524288 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=5520,i,6905879627554917829,6546743995821054648,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7420 /prefetch:1
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7560,i,16260367994873344265,15724435753115019228,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:2
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7556,i,13055691133016120233,3207924612412169409,2097152 --field-trial-handle=2272,i,7778058624340518269,10523379269803863303,262144 --variations-seed-version --mojo-platform-channel-handle=7940 /prefetch:1
  2⤵
  PID:2688

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 1fbd90963f1f01867a2b54dbce6397baef09a8a9e99457309e0a473a09d92142
MD5 988feeab7b905e1b260be24669cd9606
SHA1 7cdf44f3550c5556588639be0df60c0ee2626ee9
SHA512 b4d20ff0b3332f03393d852ad03bfc9f0f8a86fb8435754ccc302778b9f4bcc883041fb13f1d002ec464b30fbf38f7da41bba92f85b03b84230d5c5303bb2e9c
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
TLSH
T152B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b292a520a4e8464bc4e301c8a86d58820ce2d716130de39aad81f511c2cb703c
MD5 2dd3276711e5b6484a22cd8f549a993f
SHA1 7e0b1128e1b489f8e1614367ec31e186189e9882
SHA512 893be413a1c034fc520ae8e8c70ab845d978bf160cbf3f9053b66e975a44f8a110f5685275672cc613149e6db1a0dbb14004ba601f8e6d95c36eba10fc31e798
TLSH
T182D0C011F6461A9EF78000F1101F812C6F09E0822690D102C4796B474E08120104A6C4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 7fe001821746301aa07f4dab16f4ca79593a6b50ac1c0d0ec8665c660aa34605
MD5 30ea89a083f33c49dc7c4273d80968af
SHA1 311e092fb6fdd4f6c875e91ed44bae38dd500ee7
SHA512 9571f1790acc1b10dc20bc01e84cb95b24c08b321a2a91170364add316d99c876caae2613f298ce5684492ac2aff32e1d7c550f0a7e25fcc704bf3aeba32269c
TLSH
T133E026CE44C8C22FA308689B417C674D8380370BA2CCAE4F170088887082448A682E99
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 52f6ccaea574c12fb7d0380529be1ebefad98ef240ed882971be7f3016342100
MD5 352dbf390d7cc8356cffcb8ef34894fa
SHA1 e692cd5f2ad5722f00a4a014f72a1f340ddaf0b7
SHA512 2cdba07c74f20e0731ae0a7a99e92bcee54dad67d897b6de38b09e0a98ae50917a3b1bb5762a499da6276245d3e8f401c4b769db9a38f8161274d2e556d342d5
TLSH
T165E02088D4C8C23FA714B847437C570C87D4770F9ECC6E4D3704844570026447292952
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f
Size 88KB
SHA256 600fa41f6cdfa5bf231ce0cbe37bd1f239ccc65adc98b7e265e11110145f87b6
MD5 344f3eb294cfa45408bc70dc59e3effd
SHA1 01cbcc228f5f0dea18aeb210c10eb520fd06e87e
SHA512 c7cd2976fe6b8b4e6f5ff3ec2125fb17b566b06d224d00a995e8071338a84232b973242f032d0000270f123a248407800c2b4dd151d0ecb0ba0c76d8a3b7c3ba
SSDEEP 1536:wFP1yUHFMqFqeyHn383PJ8UURZSCe9g7mY+7iUrOAAfNBVY0cteeJBfXWxN5YWJ:wFNDSvH383h8UUbSCe9ga/iUrOffbVYq
TLSH
T1D49312A35832ACC14F22216CB139D3C96EF6CB97AE2DDC01780E3846E51AD4F570CA5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 39KB
SHA256 e4cae14df60dcc77f05666d2bd7f856f0b09bd26a30ffafce5d04ae5667bfea4
MD5 ceafcaba0aadce9f4a0ef2f021ad041c
SHA1 1f1e8e81c35bebac09b122d4a91204cac4af9417
SHA512 c4dba0e7449f4babbdeff424a5ec5cf390646dac2f4186bb5167e5201ccc254cc65b2a3f7f7b9f4aa7dc673cebd66684b6a4d9ee611f5d3744597a6f3bbb00ee
SSDEEP 768:EvOPPZqrttgAOLQAZZf8JBZbRC6AKbcCv4DXKC7OqZoFlZc/PUhrxtHQX/W1hRXn:SOM5tgPLQsfslzBKaOOMoDZc/UrjH6Wd
TLSH
T1C803E11F808690FBA026EE1A89EB0E19D986674A8F1C0D51CFCD170C9FEAFDC5756851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 103KB
SHA256 838fb367b40a2ace707146ef9450fe72e22b78dbe847f920b63cebecf2d32f8b
MD5 47990c6aefc71b66deaf532f9a3f4d34
SHA1 fea67130bcc65a111c2c1dc2cb3dc964cdebcec3
SHA512 dc92ed97bf07d38299337ce9a33d0d3ee3ac8af892bcf5dd04d3be606df2479989ff125216392d5f413aced6d2c3c94aba7740accf9c103f703cc7556f8f68a6
SSDEEP 3072:RPJfZBS926In5a06a/Kxl/eLy3/ZOdIR5:RBfIs0GK7/O0OdIz
TLSH
T15BA31238A73B8CEB5217C35E74F2AE4B20536271E1DBB55D170C95321A5307C88F8E69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 683KB
SHA256 0f752ada60b8da585f25d210deda7ef106fb95c5e6850f9f0b242f399b69b30f
MD5 b8befc604c76d7f8e0329e602ddd2d8b
SHA1 aba6ae1e30742458e9a9f9329a25dffe38532dd2
SHA512 4c9138b379172882e186eb3bcbad48a2cdff852fc52bf26d32cb41f46bd9712cdcba0e5a94bf405755f9d7a3350d45e43fa5b37b10bdbf50fa07c596299b94bf
SSDEEP 12288:2CYBr+4mEFyfRmLtNPnyMHXeQ2NGPpph1uuiHJLVgudSXpgwbYuaL+yrO06G9K+n:PQwEFy4JNvyIXdkGbbpiHd2ud/wtm+yL
TLSH
T1A0E423DCB37E99DBE1382434B509A8A5DB138428061CE86AA1FBBF7570D0F2E5E60754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 16KB
SHA256 4b7fe7e6ae1a9e7df9fc79295093424a5f590ec09e5ddd2fe3d80ed6dc3847bd
MD5 8eadc76b7112b52b7276d7ddc9304ec8
SHA1 517c4723b614ff033f4c900cc79b5832878ec8fb
SHA512 5d8b3d1f47b03a3942c9441f058e1d5aaa2ad9a80f7b8aa180a10ea83938de8bf7f5a32f407cf06f10005a5a0180d4f71c762f612f80ee8c3836cde0f7079c9f
SSDEEP 384:uBuCcw6vrNg0Zb3zFMqZZdR7MuDVwEYcKleZDuy4a2FKrsqB52:uxX0BgeDFMqLdVVRYJ1HBqa
TLSH
T18272D18621A9ACA96B196977EF51CB3FB2C705F07BED5B425FB13C5108742C09867344
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 98KB
SHA256 3e9aac13e3e041df1d96aa04bce856734c513793ded0afe95f6dcd21818875e6
MD5 bf7358bf6a73aab1107798593f7fe2d6
SHA1 8a33df990d79c03a537ff35ce551890d60e284eb
SHA512 ba5b5f9a5e0eae016bafdc8ed4379ebbd3d6697339651bcfb34a35d716032ebd55e747993a626604db545cc3aa26cd727b162bb760f3dd19226b273c79e5b1b3
SSDEEP 3072:Zpmjx/yk/ybRE/d4tWFmBsz26MWPbLKJiThB8Mkjb1:jmj8le0WFuszTMWPbYefkl
TLSH
T138A3127C4AE21B11EEDEA7BED2AC5CF282B715CB45BB6C905A9D68CB840C05CB573430
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 36KB
SHA256 56c0500b9946e5ad61bf5db730b7184233246a6e3eb4828a82fd2ed46d12501c
MD5 99aeefa6b53c5a35e352aafe85b39154
SHA1 b47bfcdb54c3d66cbfd8d36328ec839fcfc25daf
SHA512 1a5e2c76eeccba89b93caecc4a95f22a0b95610f9e971b60f95ef3b02fbb19f92e3af989452341125d328a2b3e819f2201a46636fa176a7bc82078501ac281c1
SSDEEP 768:mrsVcjvE/Y+AVnombeBDqk+4xNaUNZcHCpLUP043rGpA:0lLSYxnombKxJxsUvLpg3rGpA
TLSH
T139F2E1B40FE2E76C5FF3B93293128C03AD8A50C45FD4E56E908563972D5BA989E2D0A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 16KB
SHA256 925fe993dba774b69b734410aad20f58a2c95eccaf7f0662abcc2e61530e105c
MD5 4801be8e10d90b7f116bd5c0317aecad
SHA1 7aa7b575011fe38f6e33fbec98e8c92fb1b26957
SHA512 069f2aa0e6957a0287753abe91df33b88e87d20879e8054a4896f19382fb3db0dad7676931e1571aa3697f466d01b139c22ec1cfacc12ed3598a14d3ec68e512
SSDEEP 384:XwPft7fEqcJ6iQgDrtyl1BA+OodV8NjKHHu0UqBhBWypt:oft7fEFJLQZl1q+OoAZKHHHUUhBppt
TLSH
T14772D19F52E0B334422247839B7F78F1B4196CF2A1D5DE837F615A90034BB560D8A8AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
Size 652KB
SHA256 c9abadf593ac74878859c68a3643aaec8cf1cebee601d2d82acf3d5816b2b66f
MD5 5ec01b7aa967eef96694eb268e529131
SHA1 886432149768f067e79f2e15bf121c1b6a1f099c
SHA512 2e4d5df71cd7cd88b68310e5ff697ab4cbfeb2a443493e244c4ea73583bcd4fa6a28872c6e101af556e94c48eb12df569a2adfef641d343f642615c00255fffa
SSDEEP 12288:Gf6sjNGuDrEBQCcehJdt86DCebTwxDAXW2Z1KPgwZy2L/xsX7yRwRqz:Gf6snrEBPcehBMeKAm2Z1sfQMcW5z
TLSH
T18DE4232E8BBBB1FD33A5F24308C41883A751165D24F63F562F1F592D8A4C39850FA7A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 17KB
SHA256 35db4a3e74abccb3602ebaf10822bef7aa9cf02afe441644129559241b8d60be
MD5 c585bdef62e9b947a0ec2fee4632425e
SHA1 bb85443643c7ea787dfa2a51176fb2da8806da13
SHA512 6587af10a760553ccb8cbe915b91bf51deca438e8af6b99790153d571f65f2803fc8c400b76ef639d79f5f033118b19984932188e7159c9b785815c9d95eb4e2
SSDEEP 192:wTd74cFd4+8xmr5v7iuTR+TNbf5+yXxoREO9JgMwN26kuA3aeyBlUsp1dl9UrskK:AScFd4lQkqRmfEvxkN265lUU1dlKrK
TLSH
T1F972BFD38275EC429532B416446E19FBCB8C6A0D0FDE6107857DAEFC48E8AC99D398C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 19KB
SHA256 08d527212ae664e264296ef33cccf43bc740ae18e9581b8a54b1c7551f96d9a2
MD5 062716e1c8b0e126853dd8f125b08963
SHA1 0e828df964191ebf6c8e4fd342aa173c5a461368
SHA512 0eb123aac419a89574892ac5ac35e26d697d712ebf81e89202f06b735c4f7bacebe44a4dd34006ce8d0fce4f4adc7081e903fa8e216b976b6cab66566883ed24
SSDEEP 384:5C8NnFQwY59TPVMwvZAWxDMHLu3k5LdoDV2EL7Ftsa3dQm:PhvQjVMwRAWBMHLu3k1U207FrN
TLSH
T1CC92D1FF5DA0D5C26FF7B51FB8A4E25E99281D211710A38CD24B06CE6212E63425D593
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000116

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000116
Size 193KB
SHA256 8a126534f54b1c2a64209f97099e461a30842078c3ec97f4e6fccdbd9ce42c94
MD5 4a8e48aa145f14a1635029f6907b5c59
SHA1 d700864d4fc557eb0d3823c5d6079dfcda3a0987
SHA512 df9ae781e5b32c2901ba2d927b2ae88d4a2929cf2cbc65fa032af2fe98f12b0857bd6a7fb27f10c4b05e836e4994b411c9f681509ec93a3fde7090ffc5606e14
SSDEEP 3072:GB+rG51SbIQfWmQtDaITwmmScrehkrlh0kYYbIYczvhGjtA3Jj/upT9doIKG:vrG51SkQfWmqPkZhVYhrDhiC1aTTKG
TLSH
T1181412ABC7B0255DD56206F0440F7B2BA571B336EBB7C143E527A3430CA93A67B129E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000117

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000117
Size 1024KB
SHA256 c9421386db403e75ca529b811decfd693d5a7bdc9b0669b10c5b3b0f803e9039
MD5 43bd2e12a244534da1f465c4504ebae0
SHA1 71032f412d50800cef9441e8d24aef1349e7686d
SHA512 88571d75d46462e360a5915a8369070bb42f65957eb7fa11ea836b6e7be50165a41919cb74f65b009d2578c10bf37c4cb9458c7e97a386362858558c744b0718
SSDEEP 24576:fxHZYatWpVlBGcZQNXT3qYTH/5NlAZmJk7:3YatWpTBLQhrLhNlFa7
TLSH
T1E125339AAFDD1B6EDC4372BE16FB2775331480196B93034A285588CEDE09F1BEC8580C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000120

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000120
Size 348KB
SHA256 f8a1b823a87944a3c4f17d3af703dc750d386a94ca4a6c6a5f8ba1b59791417e
MD5 e15a9442a6ee1704db873e81143552a6
SHA1 4e8cc552eb02f71fb3bf652376da6b2380898ccf
SHA512 e7e1ed61d90c6e32ce05a06b83a6d3175c178232a99fa7d297e17a67952c9f9b8d4d483ca4026d43ee0ce0662ab3bf5f662e0b905601e9a7c3b2bdf57ca176d2
SSDEEP 6144:jgxSiMzLJ2EDV18L01IvoqGiG4mCvRB3h9JUrwxWD2O9aGaclP:Y02EvY01x7cmCvRBR78Rn9X
TLSH
T1557423084B6DC4874E04C9AD07ABA1EC760335C60ED2DBAD406FB5ACF17266DA4635F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000122

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000122
Size 44KB
SHA256 9fbde2dd66e0a4b1532fb35fafa8adb905835eb1a493043d32e8d1e67ebb24dd
MD5 6d874d34b0e1446e59d153417f85d482
SHA1 d8041c672a496b5a46f6bb28340502df0ae80847
SHA512 8375662f62e5061868a3462bc1419641149370c162d91b9799bb4f3037c25703fbbff643f8ab8d3a020a4b4e7f711a1b0f2b3d26187e4dfa4acf1c573f53d6de
SSDEEP 768:RKCHAuR2YlSuQ6Pzdvw+20RAHSd/FEc/iQ9nsuhmqGKZA4LBcU4kF7dJJ2bIN7h:MuQ6PBw+2DHfhosuhYKZAw4knCIth
TLSH
T11423F1E74B86B2002A3D8EA45B401B81F53636C213FF5B7D28F615ADA8E45109D89FDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 74a01c44ecaec5ad545865591019cf6cba1a11a52e39c890f244a0df7711b74b
MD5 e88b539f86b0f6c2e0db9e2c525572bc
SHA1 394cc0308dda954f714d7d75dc89e9fff6e5eea9
SHA512 3004d84bef0b86a43acf1bd73e2d7214d6e23feea69dc0c12b2b43801ca8ebbe7ca0ed165f8fcc54eb3cd039d33062a00855638852268ff220d50f774a5a516c
SSDEEP 96:PgmuK/Q8c51J/c7tDH3bXnQ2vgG/A7O9QltJETc2cWc+j+edyDjf/ruo38/61u:KAc51JgtDHLXQ2Y2OOxuM+GMz/qlZ
TLSH
T1C6E1724F55CD6D52FF99FBBCAE900D6B77A8941E0F870B1F3019D5E057A36E1A10A804
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 66e9836f641f52cc1684dc5523768777616ec4615eba559711489be4c251f701
MD5 a71a2c9c086a84f460d0a2c0cb074505
SHA1 55c296619226855eb59940771d2d217171c3c3f4
SHA512 ce40a30844dac1c059b242f78466115f26807962927b16e8051d02671a76fc1372a2ec8fe09e53d945547c86d2de31f6bfe01ddcc6a355115ae0e506d7762c9d
SSDEEP 96:qaygmBKrQGc51JGoYDZSoNNfgG/j77otYXc2cWm+jYxdEtDkjj38/6wv:UKc51J1YDZtNNo2/foMYjE9SGz
TLSH
T1A9D1724F96CC6D12FF55FFBCAD944D2B7B98842E4F8B0B0F2019D1D157A3AE0A509808
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 f60a32f82528cbb6d3f8a93d47388de9cfdf3c0061eaa2c084fe50df0712d2c2
MD5 868558f9534fe53cb9502d369b0950f3
SHA1 09b21fc99479e57aeb8d1a72637c5f82dca1d9b5
SHA512 fd47f7af052afa2def7aa48793ef13a5dabcf1bff2a31948ee9079403c46bb493f1ab1ae6f1fc59142bda3f91555965fe64c6c1de7ac7f98a43ca95d4564218c
SSDEEP 96:ugmuK/Q8c51J/c7tOH3QuQfygG/A7O9tltJVTc2cWc+jeedyDjfPRuL8/21L:nAc51JgtOHA/fX2OOfuMeGMzPQ+4
TLSH
T11EE1814B55CC6D11FF95FBBCBE940D6B77A8946E0F870B0F2019D5E167A36E1A10AC08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 bd440e9c255208342092391f9ea3a1f81eeb97657a4df67b8ffb9ea4fe45cd34
MD5 438767486031057a91f2f59481b1121e
SHA1 14139d8ca84a1a6b975e45242923ef940df1778d
SHA512 640d6ddfef69aff0cf16ef60c84230151ef100cabac49c813c2528c0449eeb6d2cc16edae36cca2f1b6f493aee308601f25c453486c0162d4eaa749873bcc495
SSDEEP 96:CgmuKrQ8c51J/c7tDH3JnQ2vgG/A7w9QotJETc2cWc+jYedyDrDruj38/61A:zIc51JgtDH5Q2Y2OwGuMYGMXqGz
TLSH
T180E1944F55CC6D52FF99FBFCAE900D6B7BA8902E0F8B0B0F2019D1E057A36E0A109804
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 6a7d1f9a8e43b4544222045b89e96d541fe14442bdf2443334bbc73856d15ac7
MD5 268df6f602945ee4c72729bd1b18b697
SHA1 906a81099b108ed0aed93675dca76e109b175976
SHA512 f6b85f2ea1dffc692783bb3fbf7246a5f69b0eadb1865e99afff59c6bc689a9a7307721cef02799bbe7f0e12fca94b9f06165017f7603900267ade4319c13e51
SSDEEP 96:pgmBKrQ8c51JG7YDH3onQ2vgG/A7w9QotJETc2cWc+jYedjrDruj38/61O:LIc51JyYDH4Q2Y2OwGuMYGjXqGN
TLSH
T1A7D1835F55CC6D52FF59FBFCAE940D2B7B98941E0F8B0B0F2019D5D157A35E0A509808
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 b75b0a90bd40cde5f63aa18c542b49dd5464434a8a65a17cc5dd0ccb062b0d59
MD5 4e32d9ad288baed42b4f36369f8795a1
SHA1 7de32fdbb7a02cfd5588a9fa23c2f569cd04d980
SHA512 7202b3f44a312219c12767277483b1b16e28761240c5608ec15d7cfe58dc359c8c5325213dc8603bf5d3c833a0fd4eab70533297263983140ee69a9c828dd9c1
SSDEEP 96:YgmuK/Q8c51J/c7tDH3JnQ2vgG/A7O9QltJETc2cWc+j+edyDjDruo38/61k:tAc51JgtDH5Q2Y2OOxuM+GMvql7
TLSH
T1D8E1714F55CD6D52FF99FBBCAE940D6B7BA8942E0F8B0B0F2019D5E157A36E0A109804
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59c7ea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c7ea.TMP
Size 2KB
SHA256 53caad5e61eb5c73c19cccab41914de5d7ba0f73913bb079c9278def8460f2de
MD5 b265cfecdb7ba0f7fed98d763b2eb0ba
SHA1 bad7ddd7d9b3023248b9e8a4678c1600829da65d
SHA512 98012ed8b605c3e575b00290e0f0825bd3dc9d7d24fa4f9d63df2df2fb0488f2c654217e68ea7a2c7c53a1534d467c41e6226ebe64e67fd3ddbfe8a187220049
TLSH
T10A4175475A804C86FF94C5FDFCD41A9F3BB099AF5C9B2E0B04AAC4B599B6B10510C034
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4996_957972988\CRX_INSTALL\_metadata\verified_contents.json
Size 2KB
SHA256 6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822
MD5 c7182c4ef7a2cd6a57e48d44bfd4af9b
SHA1 2e1e4746da948d83baf4bcebee618784f8ab209c
SHA512 d8af16336b66e4f264eda4ea68de4c1763a9c9b99635184d9ece67a9ed69a09bc1088bed254b3d2a8877ba3218e043065d1e4a06c20f18b58d312d93fb84bc83
TLSH
T1BA419322CCA5BC1F293173704EB90662AB0595AB2081295A70FC099D3FF15666436EBD
MD5 SHA1 SHA512 TLSH

Submit Download

filelist.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4996_957972988\CRX_INSTALL\filelist.txt
Size 134B
SHA256 543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b
MD5 3bf6b4eae5af15288bf0d79702f9cb78
SHA1 b8a052dc4973757ae865661ea0300dea1d27f3b6
SHA512 25e2502ad314635035f303aa1f0f195c28af91d0b51280e5a4c9310aae65aad857073137196f41a9a2fd7ef96e54ce9b329c448d5acf87b10134168ee7652c0c
TLSH
T1C9C04C206C0494B7810CEF55C5F9FD34940616007E33DC8913584270101B68E8DB5324
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4996_957972988\CRX_INSTALL\third_party\babylon\LICENSE.md
Size 9KB
SHA256 4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63
MD5 e57b8dbca804bf4a2db759fa1a70b3cc
SHA1 8acc131b3698964249b08a0178f7c8c467337048
SHA512 d2ca91851daeadedcda21ecee4cf7c9244cf21a15709e472014ba6a332a374cba80acd165b2650ce2c3994c7d0156376c22db00fe0c47833e0fca466bcb8c627
SSDEEP 192:agW/NVo4UTo1YE+FNzFE6GGfGb2y1CVzho1oHqxQJbbLwY:a7hUk1+bXU4qbQ9l
TLSH
T18E12427F7748137B0AC30172B78BA4DBF32E903C3B9556644059D06823ABD6583BB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

babylon.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4996_957972988\CRX_INSTALL\third_party\babylon\babylon.js
Size 1.2MB
SHA256 b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d
MD5 e1adfd8f62854c2d9ce65f13268c1ac1
SHA1 d564ea1d59305bbec12995ee43f1c28838e82519
SHA512 ffdf74b8bba179c7d5d6d49205b8aebfc7b27395852d05f1ae5de5c23b5dfbd87776f2046fad20b652a7663dacf90da0336a802985bad14ba3591bbfd9ca4caa
SSDEEP 6144:j7WIrpHJ1yA3d0xEWv/v/82mXgBYdnU7yTGpjGp8MTYgANTJCpzesRGvJaGpLsXW:vC/ErriNqfGp0KV
TLSH
T175450999B3217926478390A5143F090BA33B68DE940540BCF299D8DFACFD149667BF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4996_957972988\CRX_INSTALL\third_party\typescript\typescript.js
Size 10.4MB
SHA256 986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959
MD5 d931cf27eb964f239e5bec661810abf5
SHA1 1616508213014fa7cdb50e691cf737169019c6ed
SHA512 9c2bae1025c1c9579e5e7ba8119e11bc298bbf968aaaaea94f12b8a96155f63bcdbce60deb1445c484aeef3fcfdf96156fc804c2867726617e7b772440989fb6
SSDEEP 49152:noUsnsTsUGJR5dZjSB1FBUWx3pZzoYzuQRlbVbOFeWSeoMTNKtsL4IMltR6SMF9K:BTsUqRIb3nYz1q3X
TLSH
T1D3B6E6BE79E330B16A5B2136672F8001B735D257220CD8907E9CC3A95F1587462EBFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\DevToolsPlugin.js
Size 8KB
SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
MD5 7f32ca5d3f52675f538b041bd67c0444
SHA1 a8f6a8ff69ba0b3ead7a44d9b64fb009ab0e4e57
SHA512 ba763c633c8a959644535e9a2999e229db42c2fe61a57fa4e58136a05aa29d445f5e4278bcb5b529bc35e443534e516bad7cedc6d0ca2d408a5fe412f6e56df9
SSDEEP 192:95G3OvolW6gQWaxciQV23vrYbSrbS6tk63yidWJvy3BCd2nx3D8jyiQjElDXQqA4:95G3WoaaKDqxVIFB
TLSH
T13C02215EB8F62032F017B576197F8009B63540137418CE19FBED93A4AF92037A993ED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\DevToolsPlugin.js.map
Size 16KB
SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
MD5 9eb2d561a925489b69a25fd78f7b47ab
SHA1 d989f19f74b1b436e0f84b29a1b6b99033e26603
SHA512 cfcdad655a516a610ee8b6d50d62868f42645e003696438668f8cc0aff0d9e9c569d878dac1cbacad7403b1816197618c8fb1ebe628dfd456fd54447cdfaf9f8
SSDEEP 192:fVuVl3E3tRsSjJ5FWQzgFMO4+wxVdGdFWdYixmrfReRc525y8uj5p6UJO1DsWy:fVuVlU9jFWQzVdGdFWuiYro5y8eQDg
TLSH
T13972881720BAD837B44767A718EB81A67E20545C7D98A70479CCD302F3D2F3BADB2865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NamedFunctionRange.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\NamedFunctionRange.js
Size 1023B
SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
MD5 fae98d8d75b2ddab58eb531d3c08a8f6
SHA1 1e197513c4ce482eb6aef6c436afba74c1c69e10
SHA512 fcb07e23e1e96f5d3141dcaa389b9e250c0aeeb94dc3dda9c9005e49b41f5c4b64b13cb68facabffc8c40154e5f25f5caacb1d41da4ce46e2b5050e74bd9cedc
TLSH
T1A3119B2B59EA1926AFBE2413BEDF33485631010B5CF688DCF42D93406F614678CB1F91
MD5 SHA1 SHA512 TLSH

Submit Download

NamedFunctionRange.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\NamedFunctionRange.js.map
Size 2KB
SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
MD5 b2816c88b5f892e2a6c0cd97af1b5896
SHA1 d422ddf8f1513981c623db31579adfed682bf54c
SHA512 5754bc51de04ad9e73849c1c0aaaf7702d0673b7f55b7f289a1f2c6f370f55a758f15bd7574097c5eb78aa236a2b47d58a7b7550150ed29aa557cce0b6166daf
TLSH
T11F415813441DAD333E1B225BBDDB16A52F31114D6CA82758B49DCB25B3A2F378971A42
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\_metadata\verified_contents.json
Size 2KB
SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
MD5 70f58c8151600335b5ec548cade5b98b
SHA1 b916376a8c9e19541af0a787845f80535656478a
SHA512 e8fdf5e299909f96733d0b11c0617d3ca06a22283438f04d7395a4799c04672fdc5f7770e84b4cd0c66311b131e15c2e24924ce1f5e2417dcc9ed495b9685129
TLSH
T16451E730C470359C2D1A12304EBE1363DB51A3AF20817D1B38DDC89E2FB2B4754A7CA9
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\LICENSE.txt
Size 9KB
SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
MD5 f632dfdde0adc0da86f701c6f2df38af
SHA1 5a7612b4d9977a7e79f60e88df556b09a90df828
SHA512 87722a2d675028d18ea276dcf18c24e891a0bad5f85f7387702310976d2fb8e1d0687321b0844b6c47947e6fbb489fe08bd1ffbe9772955ac7191ba4e274c8a5
SSDEEP 192:rwqW/NVo4UTo1YEHFNnFE6GhUGi2Re1CVThOCoHqxLJbzjwA:8ZhUk1Hf4Rg2HbLNB
TLSH
T19C12637F774903770AC30172B78BA4CBF32E903D3BA556644059D06823ABD6583BB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript-tsconfig.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript-tsconfig.json
Size 91B
SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
MD5 40d3e3fbfc100769071a2a27040e33f9
SHA1 e150fe3170a949d8a5d86e9135726cfdc5be6c59
SHA512 3ec8cab677386a19d82240628d27b0a1fcdf1aee56f59cfee994aaea96a1dfaf2b3eab73d0c1902503bac61bb2aef5ab281e73e4b0078994b1242104d9bb2830
TLSH
T13EB01220C5280C1006F975440F2D90018160594286565E2631CFC1384756634043F360
MD5 SHA1 SHA512 TLSH

Submit Download

typescript.d.ts

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.d.ts
Size 486KB
SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
MD5 9f7f369b169033ee919dba043b424a83
SHA1 ec2ec5846812d366045c969e5e03d037a6e1cbdb
SHA512 f84397b6219a1b07a1d5c1f9a470e1fbd9d3e7143c55c7ef345be147fb0a56b8609e97708cb0482711382f448da57b7fb0b1a55a9750b41d2083d9c86e74aeb0
SSDEEP 12288:HGeBiBCdVZ+dISrJXnMEEuIwmn0NtIRFqr0dhbPzPKUnrjM/MqV6VQ:BBiBCdVZ+dISrJXLEuIwmn7RFqr0dhbS
TLSH
T1E6B4C6A768D514B1091580E26AAE9041DF34E3A33719D0B5F5EC83BD0F1EEE917EB398
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.js
Size 9.2MB
SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
MD5 fb1c951f849bca76b6aeec81fafb1ee4
SHA1 12a47c6376f82c9d529b0102d82214b8cea02e71
SHA512 bf05030b66e25e7ba27b0d999a670b582d602d639e84b1f6bef01894a95420e1f94c88cacfd841bf7ac4838754fd32e398cf0c5a4c362091ec48d8d572bb4dd1
SSDEEP 49152:8eg4L1W7tVtRPj3HydvhWw2e/L5/sW5iaVf7bnePoMM8AGdcBeEmkCPt2sr+nVsN:LW7t/RF5PB6kl
TLSH
T148A6F8BE39E230615A4B61766A2F9001B735D267320CD8D07ADCC3A95F1583462FBFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.js.map
Size 6.0MB
SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
MD5 bce05726f69c72ee12576c1ea1a3fba3
SHA1 575168a99c46fc263bb371e09be457d5c18f53be
SHA512 453cf0fc7ceeb1427ccd09bc16ee1354144fba1eb721b72c697eee4544a5fe9b641404d4de715e60dabf68a6ce1a6711353ed3161f442a1d5279a5fc666d865d
SSDEEP 6144:ITyuEDfQX2uiFwGOCqjXqW2N1ekQ4n5LeW:2PX6D
TLSH
T10F56A00201BBDD6BB45B16AB29CF81F2BE50849D7D98BA010988D715F4D2F3EBCE5472
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\devtools_devtools_0.indexeddb.leveldb\LOG.old
Size 343B
SHA256 ec48c2199ada829f1baffc30f61e9a71ea99471d668906d5ae751beb60f8c728
MD5 b371973c0fbdb4ff7017828188f7acf7
SHA1 2476a61ff39e8b91d31ccf514dbaaf7932f91cdf
SHA512 c310e0b92cce6b72b9d291f757284735952bca56e849028a9c840e9bfaf61f43d92eee3b30f37d92b16aaa494c42c04a81d62ccc69dc2af60153ce99dd25983a
TLSH
T1A8E0D818C6D5C16FD25560D39525AF499AE72B4BD78C2E058F44D42064CB089D86E192
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\devtools_devtools_0.indexeddb.leveldb\LOG.old
Size 383B
SHA256 2525c25d1081d7ae4e7346782cf588e050efacf0cbac43c2ba0a37da9e19df50
MD5 060e09be6b387c0312b04396317611e7
SHA1 3ef09e3d7b7187e3bfab2ce102c3eb3ffb2a8517
SHA512 7a7bc3049a21afca4415807dfb4bc0d4441430eb8de4e9b8b04b124c20ffeff29e6c408b3a8fd84e97ccd7c1690715a58f953e08e9027917922b0a3f6ae3b8ce
TLSH
T15CE02B58C099C16FF2045087D53AAF48EBE3BB4FDA8C2D459F04D460A486094E96E9A1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\000003.log
Size 10KB
SHA256 e6376af77028e46a7de518ea7f36f33c1812955e7b53236e8a85381f43cadbfd
MD5 51ae713ba7c2ab29fd7379d6797f5611
SHA1 ba026dff0e99ddc960db34a5008f6cfc893665be
SHA512 a6e21a62d79300c0657a540b0ff031bd467618473ef88d8e2ee8b4f295d8c40c5dbd4e0a49a511c7b31f7ad8a2fbd0dcf9e7bacb29bcf0197126278ccbf74e65
SSDEEP 192:7Dz0FhqqTxeEFvPA59WEF71D/PZ9VPrK2u0/5Fw7v5JXUxo+FxL91N:7vwqqTXpPA59t91D/PZ9VGb0/8r5JXo5
TLSH
T13E32887F3A90E966F1AD57326C312BC1873B7D817A80C59FF1E4B6ADC971A601C21760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\LOG
Size 389B
SHA256 c8d5cc7b49ef789438aaf6e05609bf21c4c8292fa64173d9603077302536e4ec
MD5 4c0da92076a12c01fc52ffe195e5efc4
SHA1 8aae6d1d2c8074ae49c3e074d429a1010e12da2d
SHA512 ef800c03616eac13b33063157171c2df300a3ab5b94191eb7f345343cac3d80c71f616b4bd225977b07b2d6d2e1e1440ef2ef9f0cde834127866e1cc92e0d74f
TLSH
T1AAE022AC80CDC26F7318209BA6787F4ADBE37B0F96CC6E866B01CC00B48219CE26D551
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\LOG.old
Size 349B
SHA256 230a78a3d46c405f76b31e8b3810c926a43c9540976b5149a4a5a3fab733056d
MD5 028afb71e68bf8c4bf0b6bd4a78fc537
SHA1 778f04973cab990844ba74963dd0a1d59ac95b39
SHA512 82784be77f1140a0f81de0821bc031b5762c68fa15fb6b9b6b89e8da228d0436c261cfb960ee45753cd837f0c5cfd54866faec66bd7a33858d86fa0fae717335
TLSH
T162E0687CC0C9C13B132410D754347F0ECED7230F96CC6E858F41D8107047088A42D251
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\LOG.old
Size 389B
SHA256 0a30c94dabb670dc12b4835c71ca6e9fbe8a7761c89dc1fa374c33561792b1ca
MD5 04b53f7e23162cae764aa9a48cb45337
SHA1 e388de77d003349a4679d6b787c4b8db81d4e9d9
SHA512 85123dc57a5fb732f1ebc1e00d4fb6ecd980144a8866fbb2fa9fddf89b3467cec28d283aeedf4768cfeaca3f4ec216425798f67fd6fb9107c4258d7c29209815
TLSH
T1CFE02B6D80CDC22F6314189355787F4ADBD37B0F97CC6D855B00C400F48219DE65D591
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 7f8358a3665d648ae6cca4c775e181b2a43d403225f5ecf536fdf69d4b3ce0a5
MD5 d2feaa84e7b11af16090c7a8608de2c1
SHA1 0230921c3ab2bd188a2ce8f5bdfcb19274a2069b
SHA512 19ac1003e39330bcabf436faa36808fa94281a448b1c2d6cf2751f92959dd9495b28c9161ed91c54da7d73ab64f824364e6613bee8bf990e4a69f7669b183217
SSDEEP 384:DWLWitx+Nk6LS3JJkeyJx5XH7ts3NGyBTuDRTXPD8eE98AdBxDeUx5OxSqZgaqSt:WuZ7NtpOs6/E
TLSH
T19A829BF783E9C62DC91156F09A14AE2FCF190514432C3C7AC9E8BE4793E2572E252B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 020c88b610b673961a54f58eca3721cdbe21d6e3072464e7fc541796537fd9f4
MD5 9e62093f995a944a580a12166cc49b35
SHA1 ec8c50aaf0404299b7d765dc3475b23c4a7124d3
SHA512 6149d63c0dc53e43a463277e2daa6afcb7b78bffdc2a786c159603c9f8f0efc7d99fe0892d3a730f267468c4b793ed84a711db02b6feaaa08c231b629d47e8c0
SSDEEP 384:Da5hd4ZdDXZcdvRJoeWJfM/jtYSEsUXebzPWWeSmx5O+TqIZZgaeeSMfhDrfo1YB:UOHn1NDT5
TLSH
T1B7829CF7C3D8852DC91156F05B25AE2BCF1D0A24432C3C66C9E8BE4BA3E2572E25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 464fd00aeca975a7d20cefd2b7a0d16ed2a2afe39e88711b851f5fbc2dad6fcc
MD5 55448e8e9c049c202dd5b91dd673bd1a
SHA1 651a4851f14604fda9d9992ff30057983673aee3
SHA512 0a56509f2253943d076ddd854fc0681163ff426fd1456a3836d16c42b723c3641afa613ec37fb9cd0c45c66f49c0edb58d6e4690cb0047190694ddaa8d08c988
SSDEEP 384:DWLWitx+Nk6LS3JJkeyJx5XH7qVts3N3yG0yByANqwNPD8eEFeUx5OxSqZgaqSTQ:WuF7NtQBaY
TLSH
T16682ABF783E5C62DCA1156F09A14AE2FCF190524432C3C7AC9E4BE4793E2572E252B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 33a3bdd02ab247c91d8d804e09f7a43464f6d7c8b1cd2be3049fd69ae24c57cc
MD5 caecb993c035ac33aa13b5f31daa7e82
SHA1 6c534e50b05d83ef05c1699120d403b6f4bad408
SHA512 f467d01c120cba4ec9176c3ad5e6f2d9ddd0fc8567a4fa887f35625a1349c66576f497aa97c0ed5de0d2ecb21d381ec7c7d820c418f80e62a3e2faa2e15ef9b6
SSDEEP 192:sxZvRtPW7/fnsnLIdpqFMHW6+WNrrY/YYBhl1IgrJ:sxZv+7/fnsnU/Hb4/fh9
TLSH
T14C22A8566E34697B8CCBD209BA15BF13D5F95032A1D51E98B6FCC61C04E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 40a6ef0c798640645bb62545d1fd0522ebd3d6c2d81dc12579330d58967272b8
MD5 bd62844d5d50fe39ab4fcc2e11c2d663
SHA1 0fb2148d555135e8e276ac18fd56e2008d1f8d5e
SHA512 9129d91f1d714ec3c8eac858ac25d11c24f46dae47fbe9a29473b1e993df5ecf921b0da1edc7bd30c76f026402f5566e3499717ec9acb2e417fd9eaee4dcf3d4
SSDEEP 192:sxZvRtPW7/fnspxIdpqIyHW6+WNrrY/YYBhl1Ig5XJ:sxZv+7/fnsp6KHb4/fhH
TLSH
T11222B9566E34697B8CCBD21DBA15BF13E6F95032A1D41E98B6FC861C04E7ADE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 aa22f3377f029d5c9ad72cb8de03faf43bbc3c26e6035d5739ff11c3dcb291b5
MD5 865adc21b6ced0eb62c9cee5e79d82b8
SHA1 4e83470ed7f6dcde40ff3b9cbfdbf1fea80acdf7
SHA512 ca43dbfd00f0c451e570d6c89cd1c9e2783a3fa7a9def9366ce3a02bad350174dd7f1bb792918fb6ef7a3805b9e72e717afc58e84e88781bd1d91ec28724f058
SSDEEP 192:sxZpRt2W7/fnsNR+lbsg5dpZo/dfeHW6+WNQXhzA+LhfYwBUl1Ig5lJ:sxZph7/fnsNR+KGbHb54fjw5
TLSH
T10B52C74A6934293B8CDBD219B915BF53E6FD6022D5C05E98E6FCCA1C04E6BDE2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 30KB
SHA256 c7c211d39a5f5f8116f29c188f56adc46c71881058a56d62191a9a69c954d0a4
MD5 012ecc186dce5328a87da06979852e8e
SHA1 200b5f87cc304a49d642c337e9707d66e9db71ca
SHA512 8fc1ab0b3146b3bbe9e5f1abd91451f28e57f6dd49d6356d974685237fed0b47d0a8fbde51317e90a63dee889f79d58298320b925542e9e4d42faf15eacf108c
SSDEEP 384:sxZpU0/fAoHmsE66s8qMpRiYnazAW8pZS15posJWeT+8t+KGdHb54HNjED:sBU0/fAoHm4Mnc7WeT+8t+THbuje
TLSH
T136D2F80A6824D8379AC39D2D653C7E33DAEC505256C4DEEA56ECCA1C00ED5FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 30KB
SHA256 dc92a9c4e310bdc213a1c55c22d14e12a79962ae502053d57d339db4bbe5b61c
MD5 f8650ba1d479bf40082c356321f43718
SHA1 ec05e3fc6ea651894e2c046de7d762f7b0e263d1
SHA512 3daf3caebf075bc3305244f721bba3e54b8b3c844cb17bd5c521280c103ca46915f2a3984bacd61eef525710a4fc2ebee43c3c9e57590b404130dbf9b7b6170b
SSDEEP 384:sxZpUe/fAoEdEsE66s8qMpRiYnazAW8pZS15posJWeT+8d+KGzHb54HNjED:sBUe/fAoEdM4Mnc7WeT+8d+1Hbuje
TLSH
T126D2F80A6824D8379AC39D2D693C7E33DAEC505256C4DEEA56ECCA1C00ED5FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 17d5c8b22809c05cf4bf450ad49c4c5424f075db67390ff2540822756ff2558c
MD5 bab42f0299b46d37765485f6c9184d9c
SHA1 9fffe6e2015d278cf1b2839d1d68ede934701ef1
SHA512 70af8a9966dcc4b55bc770e6f3de8eeae4f6bbbfddb2c5f71236539aff98912e861c4c528bfd1c417075b19ff0ccf45ed986f05469af56b9c615987e95a72e5d
SSDEEP 192:sxZpRt2n7/fnsNT+lbsg5dpXo/dfeHW6+WNQXhzA+LhZ9/xYwB+l1Ig5wJ:sxZpU7/fnsNT+KGdHb54rxji6
TLSH
T19562D74A6934293B8CDBD219B911BF53E6FD6022D5C05ED8E6FCDA1C04E6BDE2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 38961556c0bfa9ab53243c34549bb16a7365cd5c47fcc0da418eec710d28eef6
MD5 2073d94500f826d0594fa3b9188b985c
SHA1 d359665edd52f05dc039be9513c8bd86e1aba097
SHA512 23d982bbc88f5b3dfd121293d76eb696b12a0ee95bf4f123d6b95063d338c22bcf782563e7a64851b8337714fdab663f90659af24e93acdb1a8510794bf591c2
SSDEEP 192:sxZpRt2n7/fnsNt+lbsg5dpXo/dfeHW6+WNQXhzA+LhZvL9YwByl1Ig5wJ:sxZpU7/fnsNt+KGdHb54p9j26
TLSH
T10762C74A6934293B8CDBD219B915BF53E6FD6022D5C05E98E6FCDA1C04E6BDE2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1656d06ff6a3224b0010ec5694d729e7b827152d9cb3be008c1fc812a664d0d2
MD5 08651a0fbfd64f06dffee210bf6ff5b4
SHA1 7850dc8b297684265f90252e02b94767b554501f
SHA512 31b2b57dbc48d0dd34ce942f7da1f130713b7afe3effee3fb900d1cf9f7e130e35e481f2d9f05e5034a04cc2a1ff404e014160ad800359fa1f2e7a24c28ed8a0
SSDEEP 192:sxZpRt2nm//fcN89VyZsNt+lbsg5dpXo/dfeHW6+WNQXhzA+LhZU1FYwBHl1Ig5U:sxZpUi/fAoVwsNt+KGdHb54WFjf6
TLSH
T17072DA0B692869778CD7D21DBA15BF63D6FD102395C05E98E6FDDA1C04F6AEE2203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f205d61c4fbf696b2997d8da699e41fde6321da51f181365850db72ff585695a
MD5 3c23b0bc7ffa2b4ea97ddafa02f23253
SHA1 b737c70b5f730f37269ac4bbefe69d00573dbe97
SHA512 7ac549af44a7399d7fd4301b91e9a7abd73b14cc3e3d8646bae698fabc045b41ac5faa22efd81633e267c1477ebcd2b2b3db485d7cfa394b8f8a6090fca29c94
SSDEEP 192:sxZvRtPW7/fnsNxdbsg1dpmQdWHW6+WNQZUzA+LhfYwBUl1Ig5lJ:sxZv+7/fnsNxCO4Hb+4fjw5
TLSH
T12D42E94A6D34693B8CDBD219B915BF53E5FD602295C45E98E6FCCA1C04E6BCE2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 679a2c59d7c02d46376649bc6a6a60bdc1a1cd4e31da16513bb0dd9f59de0f15
MD5 6cb5205862c9c9e3f44c88a2c4a6ea81
SHA1 527513cdf5d6824ecf35ea54eb75d1bd99642b19
SHA512 5f24f82df244d51ad644a30f4361c6947377628342c5c4f026b6841e3c1037b2c067ac976853361e95125dd3620888670dbaceb15b8d889c77422e09c8b39388
SSDEEP 192:sxZpRt2n7/fnsNE+lbsg5dpXo/dfeHW6+WNQXhzA+LhZ9/xYwB+l1Ig5wJ:sxZpU7/fnsNE+KGdHb54rxji6
TLSH
T18662D74A6D34293B8CDBD219B911BF53E6FD6022D5C05ED8E6FCDA1C04E6ADE2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 31KB
SHA256 37d2f5075cc4ec42407ac8c0508f2ef85a09cd13afa69a52c9a9f673f71228b7
MD5 465d01fd21f0043649a2baded78065a9
SHA1 835cce03de653e41695fc102134607c7cff96db8
SHA512 d93c9ad6ef8e42db1176fa0f7ff6544667592150df1a5096ec452686eba7a19f49a341bd4058d036f2325fb252613d4be67307f92e9fed39d8cbb442c97566bd
SSDEEP 384:sxZpDe/fAoEdEsMWvC66s8qMpRiYnazAW8pZS15posJWeT+8X+KGzHbz4HNjZQ:sBDe/fAoEdUYC4Mnc7WeT+8X+1HbYj+
TLSH
T1DFE2F80A6824D8379AC39D2D653D7F33DAAC105256C4DEEA56ECCA1C00ED5FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ecae5f5a1d7a7a0f633a239ca4a919473862e1f97ea2447f57acc199646d7eac
MD5 c4d19e0094d8754da58d7389edadf71a
SHA1 d0cad9f53c1a7a2c048050f6af33bd0110a9b7b4
SHA512 38f7d8c1f9e383f1040a030daae3bf34d6aa07c555e5b73e3b7d790ab96ed79ad7392fff1d8b6ad2a9c1fa8ee3e0533237f888836fa93e7570f92d0032674b06
SSDEEP 768:1KyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXuropvcN:1KyYR7jWv3NpBu1ja/CL8OXly
TLSH
T141C2E92F640DCB7E4FC01E9DDC5A6F9B3E9802C796548D4047FA994C02C77EAA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 4386f8aef723b445f301fe06eb9231f18398ebd189b00a595d63e558f569d9f6
MD5 57af56517e5b5d1ac3f2d212fcb20b75
SHA1 93c9e1c2e32791a294a85e6f951585ba7f4657b6
SHA512 6574fe3892549dfde0f4249c8f3df03840a887f4f8dc3ec421eb64ac0ae221df3aedca28d6ebf0595cb790e7fa4691490f7cf4da34fd2b862b10bc686c329a02
SSDEEP 768:1C7OyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVlRCLlGcvXuropCrf:1C7OyYR7jWv3NpBu1jaqRCL8OXla
TLSH
T143D2093F240DCB7E4FC01A5DDC56AF9B6EA802C7A654894047FA984C02C77EA912B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\260bc789-67e6-4b1a-be67-1979ac3897d8\index-dir\the-real-index
Size 72B
SHA256 d6f56e96e4d28c38bf9573aa4488130b6ef2f67cfbaf881b94030b7c37aa8a60
MD5 8b5331a9622f1fbada9560286ac4d94e
SHA1 a165063362db196fe4309bb16226233eac3ef7aa
SHA512 b731af76938c827e62ddebf8b2767c13d2f58338fd31193f256962d2d6aa3662496984cf679d0d520d6febaf4740f0f865125672bc579e80330c4fc6aa8005c3
TLSH
T128A002350B925414D84211F019AA32611711C9160A54170741924154DDB26554D4108C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592d40.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\260bc789-67e6-4b1a-be67-1979ac3897d8\index-dir\the-real-index~RFe592d40.TMP
Size 72B
SHA256 5258dda797ca38047dc165c266911f4fcdc2ebd48628574298bae095cc40c95d
MD5 3805218ddf60cfe92d3449d33cb7fadf
SHA1 0b5e12134ef52a8dc655e11809b077e37fa8f43f
SHA512 a1beca81decd7452840e77b922ee5f1f8efca9367a538039ddb39b98ee7b46bf16da6713ab727cd0e23fe695d4fa0e3eb02d9ca68044b507d4cb7c3fa749038e
TLSH
T152A0041503D41435D43311F315D713411301CD1C1540130F51DD4354CC747734D4130F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\68624988-4ba1-4a1a-8469-b58c694eae9c\index-dir\the-real-index
Size 3KB
SHA256 277cc6e856869ad626f9193cfe3b71e48286d1c726611da329ae5d464c7d1274
MD5 8434f31fd247414cc576a9fdcc5bce13
SHA1 d99eb7886638d6e1d7cc7ea3a068140006c38894
SHA512 bf0e5e31993794a2933fd89d10e92e82c24c2c66b21f81e251e73210acf7bff47e765b3286082a239a7155e605700da309d37069ed199af2bcd59e008ee52220
TLSH
T1EB51B54E1E4B5B6ADCDC72B108790442377855EE07581E0B64FEA934BCC33285CC9959
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d567.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\68624988-4ba1-4a1a-8469-b58c694eae9c\index-dir\the-real-index~RFe59d567.TMP
Size 48B
SHA256 a700d42a73e52774cfeb3e7dd2ebca604ad27ade043a47bf8c1afdf2512901f4
MD5 58c31d6702122234a58760da2951eee5
SHA1 aca58cca0c58bfc8ab927de9dec4983657d6d2b8
SHA512 5a3e51f5bff3e2230cf14424f688242836a0b5ed4a4268d8457f730bd54865fd7f2edf260bb7ceef28f3563f0ad265ad1295f14acf0f4e85dd0ba36f6cb9e8e3
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 375B
SHA256 ab7d964d28bdb3b0f12140366ee07dba2405145017d82b43b605e0f67664ddea
MD5 0ef7dcdcc3248be32fff6d99279cdf45
SHA1 9e6757f38b16ab1abcf978da24272c5fabfaad2c
SHA512 f7d978e9461d543ad01254186f7d859af8c08b807e8d84c38f8f1e94683ea42c09ca6baa3339e4e31fe14450b581b0cb232003381bcb4d9be710c07eb8b0117c
TLSH
T148E020B73DF71834FD6BC3D6147151554455BD9CC5C1FC4F502E728729B02002819C71
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 b48c018950217a9db9d4bbba440a8c0d40396a5fc04d675315edb07dcf2478dc
MD5 9f7eb7614ebb9ea88d2f7da6961a7b12
SHA1 e6027ab97f41c98d7b01260acd2252c6f6c03889
SHA512 f473412fb4fe2edf7e003f30c80df154449b8335508ada8e8e9a7f3912aca2529d7d56979d283e3b102bbfe1de970f9e268e79be8eee7638409f8a1eda830d46
TLSH
T179E026FB3DF72938FC6BC3D614B0556A4055B99CC6C1FC8F602EA28729B0300284AC72
MD5 SHA1 SHA512 TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 10KB
SHA256 040729d3e066f33c34f980185690d743fd64e496036eb10e83cc30271c90d348
MD5 fb4b394aec3b0982938fad4ea9a0a333
SHA1 c3b233f685e255149222cc9e19792d592132850f
SHA512 f4f25e90f70848b266d10b9ac9d89e2fbd6cb60db3d94f138a8537ee897ea1f951224349082d282b10bc3297a6c0f51f2986eda7cc6f996879cf014d771a8987
SSDEEP 192:xOUFj8RiWV9fSHt+O7WjNDsjPLrWa5pKzRSB:YUl8QsfmNYWLd50z0B
TLSH
T1A5221AE76B7968322BCFC6B6F1CA9142A97760C038494092F764C9852B54AC3F5F3758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 e118a6eb21be4964bf14fc3cc147ffb3b908c3d3d423a7788289d63413ba30b2
MD5 29df2a54312d60657fdbd030ebeaf95c
SHA1 a28ac0663c3db8d3206ba19d3d44eacd244bf4de
SHA512 fd3626df5a487dc4743b4718b2450e8279044e5c467a16ff3a697ba83345c3cb5dc4691f0767549d925c3274d1ae697059f91a510b55fac1325ed36a3714e9a4
TLSH
T10BB0123144289043C4006F749051009A31200C9C1305221100A890A84C712055082022
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a2dd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59a2dd.TMP
Size 48B
SHA256 578289aca1c90e9236c4c5d7e032748ee12350bf36eb03b24e851f62aa6c2f32
MD5 32b4670935d657c48545c924d24a0564
SHA1 a7b3c579611adf1a378147c02c186395c14aa136
SHA512 83a2a0808c15e4681c13d0b8b157747e5275431e906136ca8ab35f19807c1127266fea6231708902586ab0a6993523758c57309f9dc3937a64e04bc7b15fb886
MD5 SHA1 SHA512

Submit Download

f1a9fec0e01199ec_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\f1a9fec0e01199ec_0
Size 193KB
SHA256 459c30afab96aea9d0ff8a11c8ee2c213165736008e50a87e6757a45e5e49aa2
MD5 c8d6d5c38eec0115265d1140a43ccd16
SHA1 aeca5b4c4fca17c55faa3be19e0813b82ec20fa1
SHA512 decf2a8bfa1435ce501e5411ef3691f37fe7ecf97398daa84eb5415d4fb5fbcc40cbfb214b0847adfa55eecfb14af1bc0157775cd25e835aed3a1633ff8cda6c
SSDEEP 1536:coWVFWcK8jE3VIyj/OznBCj1O8/vrbIvUB/wIULnqSZEn7zCo5VeJUuBHvIKcb89:VrFWzBlGbIvlpYPIbPIf8XFjvyuVb
TLSH
T142145B755300E43FB923DE61A27E7F4E3C25A167DD0686FCA5A4E430AAD3DF20526B48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 168B
SHA256 3e2f41558974bf5badaf860ef7a27a61de8d3b595aaa60c1b4c2a2aecd49f96b
MD5 debf3e438c70c748fa52b8a11492d192
SHA1 059bb5cbf74bf61eb7d87cfd8db8a4f4b9c27f0d
SHA512 0ce3958ad80e4ec23dec04388f9ae1640ef66ce3327185e46cdd9c02bf7f441e3ee0c5c781d24e173628632698c1f270840d5df7dc8f79be2f165d3de2de745c
TLSH
T16AC02B44C4D10900CCC0013365C486802B202F140711D56B4440441CC8924C675C0112
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 144B
SHA256 08092286323ce7a2a206f3dc083b0efef61048454c68f5eec5d04e4a1999bd33
MD5 08428314e454fda6258f6af18d3189c2
SHA1 838c3cdd995bba754a55a14f87473aaa6ed54b08
SHA512 3ff768ed6a820f7cb947ac2abbc030a5f8f4d4daa8afeabda8044f52d09dac77ca8f833ee6fff1b3e6de56ea2e68473129c7c76fe705f556559004e41961820f
TLSH
T13BC0129C51E20800CDC002BE76D54AC42F333D240FA1A55F8454D47CD8E30CAB691329
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 168B
SHA256 8f2c9afccaa7e4ca4afc4fa00edfca57daaf553136cd470fd570b8b9fcdad21c
MD5 13248238597e2547b9bd9f790b2a3aaf
SHA1 f28ee449b11bac023af1aea1b04864f8199efefc
SHA512 0ccd165a90b8c36229b01eabb4f40001bc0d0b6c44809cae45a222edd46113e2f98dc22d120e9a57c9350559a65801bbc2f2d58f79eea00da44c4dd3e12ab921
TLSH
T1E8C02B4C40D30811CCC0013327D047843B211F180711805BD490C49CC8920CB73C1122
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 168B
SHA256 093601781e184875e6a4cf0c20f6c169fcb764d5a78148a2755f21ddcdf94640
MD5 9d386b6e5c4186ee92f39645e4a57064
SHA1 e0699bde7e8e78623adba0f25ac6409d202eb7d3
SHA512 6c481603f8af39dff21a263029c41b1a084ad62ede622a9d33ea839d37755ced1fb6df6f2cef1cad48718ffd6e0ae6a3f2263f288584a08032796a00c16a30fb
TLSH
T13FC09B5454D21D00CD44417776D195D43F675F1C1760D45B4595886CD8620C672C5321
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8338678d4416d98f1ffd814b2036f82ffea9ce120c1210d227ab8320525b8979
MD5 a3a5f601979e23e0bbd5b071784fc6a8
SHA1 f6d154d1819604ed3adb93c0dfa035b92444f5cf
SHA512 426cd0d0f6e0453046d86b21d4cd82936062797aae9cb785c758d77a717669c25fd02cdb24d6e2615578faad035f125b6d7f8cb0ecfa0723ddbc0292d9d63079
SSDEEP 48:KgdcRtfLPwbD2jISlwK9l1Hwx1gYmnddyLmBcJ4FZDHb0bni/ISx0K9x1b0xZkYr:KwWYKHKiW+YKTiWSwwK5uV
TLSH
T19491E41032BF420238BE29C88675CB1B125132F77154E62BBF7C1496DD6AE586DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 234B
SHA256 00b953290be42ef24b6b9502fe9d5b47e0cc8d4d4b116421d8285c64cada42ad
MD5 0d3c056c5a57c450415276f6544486cf
SHA1 b70506cec0f59b5330c7330e05f03d942819aab3
SHA512 4e33c166cc87fba409b7d01f6baf8c08c700bab0eabf6a0a60f2ced3888015a6577e49f02216293957261c2a9e57625b9b48b21ad2f27b1a3fae01b6259f696a
TLSH
T1A9D0A7FB56314D46BA70DA996428B15DC5278E49CCC4CCFCC804B16320B4923C401D79
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 8c73036ba3a8c9f727ddcdfa6ea64e864e26d21c269ec9919af871a0ca4de644
MD5 082bb1f14da3f96a36caa12cbff25d5e
SHA1 c35ddb6763673e6c75f95c272343d036fd3de1cf
SHA512 2028e0d691a35e6c66bcecd403868f69b3d2e5660d5aeec531151f67d8fa0aa226242e30940712252991dc4b006b5c7ed4a68504b948e2360d521a237ee83c8d
TLSH
T131C04CF71511454BDA30DAD96428B61DD517468D8CD4CCF89418515315749374402DB9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59282f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe59282f.TMP
Size 157B
SHA256 8be4dcff90747255f1e04dfff8df424ee2b6cba9935488e1df9aba470de82190
MD5 fdb32c80a5233207faf0f0ef6f1b4131
SHA1 dbb6ca1de48d7fbec6734a20aa25c01e372837f3
SHA512 97c8f9bc9cc3a470275d2316e83afc75d29049c9f0addb2495ee50c726e234c98c126fc12cd2b2147be150927ab86d705e8ea04368511937863e9d94237a4e7b
TLSH
T1E8C04CE715114647DB3095DA6028B65ED5274E8D8CC4CCF89519715321749374405DB9
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\000003.log
Size 41KB
SHA256 4dcfcda115def36adfac7ff649829170bfb42aa23c86200a2b2545521647c928
MD5 d0e46c334731890ed6d884814a5cd62e
SHA1 ee48e3d47c65b03e8b8313628432626dc6c3b03c
SHA512 bf1724dfddc91ca10a30c19dca4bca134fe23e51f95420d792d13374a8ca45c00c58a87c56594d37ed3cba94a7160a21f2f60b96c1e8975c7d049914d3bc6336
SSDEEP 384:7umI5ygIbjNvX1kfnduk4K62kZd68aoM5jzFn5bNW+:7umInGQdYK6dGbo+
TLSH
T1BF13FA20A2325871F93742325B52DF89C332C9C6AB415626FE92B61C39F77852F9336D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b126.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b126.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cbef1af2467c865750dde685b84fcdbb420ecb6be5de40191b1b944628c075b1
MD5 7043269083298b4d3e35694dfa6ea393
SHA1 9ad6153351be22545f233858484f4c30099be18a
SHA512 a83eb916de6a5196ed1a38eb735f6447dc349870e48df0cfc8f44067fae2167e562d00d8c124e1fba045df0a64aa16bcbe091dd377ffd6af162e799b62c207cc
SSDEEP 384:Q3yFaeO8WsNfEbijtvQX5+DtF8iL7XIoiy+1Ajjz7:Q3IzhWdcYkD5Ioiwz
TLSH
T1FD826D36A9646D3B9DA6B481B05A3153EFB8606BD6D83BC0D6ED9F1E01C91AC130B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ca2ef93522836431f6e1b214f8c9c6368efd29278ededf30039701a781cfe802
MD5 946439355d4c9cfca5445ff1ad7cf533
SHA1 0d06f631a8dd5d19afa2722601e4648f3502874d
SHA512 9080a6c0c2739b9333f00c7325392d60808bfd7cfcd20c76b9ad7c0bdf35faa3aae17bc5d8f243749fbc3303b371f28d4ab9d2a22d794c8b5bd5b7308d02a9eb
SSDEEP 192:EONk6nnHGQmiUyVn4AQYcX5hQDP1JjzoriLwMczKvU6:EONk6nCGQNX5+DtF8iLkevU6
TLSH
T10102EA34BCA87CAB8EF76D45B48633139FA4203BE5946B80DAF85E1D10D769C2306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 00c8b1e5a6c2ef3e63caa9b528331b13b4f2ba2754ad081a469fb269e264ac91
MD5 77211ef59b0bd54013a4d0a65fabbc77
SHA1 2ab99a73852308643f39627a8a78012d0e963029
SHA512 8648f895885cc1b9c73bdb42d997025c2bf50449896f45aec1cecc09b429837738f9ff761e426a21fcb697071f5af1c09d18cefd33f153b7075a7ebaf6793997
SSDEEP 384:NiFF3yFaeO8hzsNT8TUNTUlIRYTJciUUw2QX5+DtF8iL7X4MwbASwoSaG6ODd9PB:EFF3IzhRKwgvqw9kD54MJS4h9PHD0wz
TLSH
T180E26CE194D35CBAC59D97C3637DAD02AA7CD077B4845648B3F5AA2DEC8A0BFD306801
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 981ff99e79fe56c1dacc7e88376bb861981e19c8a385d7fc93d204f2b92ee281
MD5 4e3b773816a013796949d61cf6c890f6
SHA1 eb42a2e43fd7ebef27d5c501a2f37b9a7e9888d2
SHA512 b13524c0dcbf12eee2d2b44adf99c80e79bceb764a6760d17da32e92b8fcf80ff529da6c2cbcec230942acdfddda7d2d403a42c0869c1cc99c682543272a8a46
SSDEEP 384:93yFaeO8WsNfETJRiUpw2QX5+DtF8iL7XIoiy+1Ajjz7:93IzhWxrw9kD5Ioiwz
TLSH
T1DA826D36A8746D3B9DA6B881B0463153EFB8606BD6D83B80D6ED9F1E01C91AC531B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 6b1373fe8c1356c203e1cd40e8a67f030947a99752b15e786ed8c7ec0f9d680c
MD5 8e978dba364383d2bb5d19959388b692
SHA1 94161273fe6b334ea848ad79a3fe3bb93d6e7c96
SHA512 ca7da943cd5884e8a368c61b555306eb3a7736c08300cf71c6341c3bc35061337ffc3e04588422cd5112da4eae28a9ae2e23b604ead04167b1042122b6a3a380
SSDEEP 384:NiFZ3yFaeO8hzsNB8TUNTUlIlETJRiUUw2QX5+DtF8iL7XKoiy+1Ajjz7:EFZ3IzhRIwgsGw9kD5Koiwz
TLSH
T109C207F658D7983BD9AE6B43A37D2D029EBCD057F4946680F3995A1DCC891BFC30A801
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2161c3ea07825f279b8ac45ba4ecf8b4c77e1aa9f66c4c103a61b398afe5a4d0
MD5 0276441e699f78273ed0cb324fd45c11
SHA1 534857ebda9b47b2051282fa0adbc4adee9bd916
SHA512 5e8cd4e1a4de902ac3bf7966987430d81e5a7c8b7ec0258855c0ce23c19c5c8e2b09a5bd6fe9f436331053fbc235757347fd7f52fb8c5b2c343151b47dcdfced
SSDEEP 192:EONq6nnHktQmiUyV+4AtYcX5hQDP1JjzoriL7XNedg3e/5iU6:EONq6nmJtNX5+DtF8iL7XXoiU6
TLSH
T1D4120C35E9A8BC6B5EE27995B08731139EA52117D6887FC0D6FC6E2C01DE66C530AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 668c78a24b0c3a0a327662a3a02984ad88406b4a93afab88c091ba3416bf503b
MD5 cc8b5df5d71a5e43e4bfd34bf6667510
SHA1 3cc6a0ef64d855890ee86e102a5e9df389c6917a
SHA512 f5895fa5b4de1563205e45d8ee1959c211d47bc131f4b86fa1c9fbfe277442f43e2493cf4d3738f2b4bf537e6e63478948b550dacbf8d520ab04e0d331f806c2
TLSH
T18CE00201A35201BDC03C47310043177417D2C46042F1034B9A1005547C133401F70FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 36891203e8c6883857a66cadfc8e899a359cb60392e28a3ad21a50297da535b5
MD5 b595948f53d71ff69659356d5ce80574
SHA1 e2405084b971a48cf8652157e0428e7b204c0665
SHA512 78c0fc12074047908f9e7c087f94755ecffd0c750c1e8cf3d74a2d2ffba58f0c71d5e6edb5c37552e49d122ff397cce0ec1a99d942cf5abdc4fb8944cf68a61d
TLSH
T1E2E00202A35200FEC03C47314083177437E2D46053F2034B9B100565BC133401F71FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a476d56154d4c168dd3c5a72a270e354c815ae7cb679defae02e97ebe6627d59
MD5 5c4ecdb1983b47e29ab71ab3a17e0083
SHA1 d98b170d962254bf75800318c13b50803d5f1220
SHA512 41870497ca62bcd8d9cdc064a7379c6c303fd17cf98408d437f2014b5a959a4baa5f10b2d22b4de33685104cded859fc1f052e993200fe756b7f05250f5063c0
TLSH
T14CE00102A35201FEC03C47314083177437E3D46152F6035B9E140565BD133601E71FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 53e0c38bbbd1ac3d9da5062e37177185048d2d11cb1d724298a2bec70e0f8589
MD5 44d9921b8ac9e3bd8797c413b5709179
SHA1 e8335373a1d0170f36798399ca45ff4b6adafaa0
SHA512 aaf16318fec4c27fe9ea66371c7861eee1d3de8f7e3573c2689cc9a7f29f545a4c69bc34c5c106369ca4cc022b81be5c0aa9c82996b3d261885be1ffdab987a4
TLSH
T113E00902A35201FAC06C573140831B643BE3D46142F6035B9B6405696D233606E71F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8258397f86fbcedd813e08c0e1e5749428174a7eb5d3b398c7135658169cbeb3
MD5 008a75e096b4f9e97211bf3db37014f0
SHA1 a08354cb0f56aa094539bded80321a2835c9e9df
SHA512 83990fec97e1440106be9d6aa8d53edc508d40c8d9ba8013c1baa02adb7d4614539302c519dc71dfb8725a5b42c358ecf4c4b1b173882e57026ff1f4ec1a6e8e
TLSH
T15DE00113A39292BAE02C433440872B183BE7C03403B3031B4F241A2C2C273202CB2E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a97f014792609547c50f0e49f4eae03699e8b0ca070fdaf94f2eb1887b92966c
MD5 5d7d55111fad093d67800fd6e0515db3
SHA1 9522031e43d1444d6d309978d1482c18655e862e
SHA512 08fea31435c8f8fec4d7756158b0e3de9952b491877dc5b270a1c6598ae17bf52d0cc604d5555faaee12a6d55af359e0c7feba251893a8e50ba9647ca529187a
TLSH
T127E00201935201BDC03C47310043177417D2C42042F1034B5A1001543C133401F70FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e0b0d0d762e9dd47fc149875b5a60ff1dead3f267aa5c4f9ca30802dad05cebc
MD5 0c7272a13e8df181c9c5faef00f424c7
SHA1 3e28d69607cea42dc789be1ce0833394a603ebbb
SHA512 1d0bd3dbfe280df1e675bb55823176d206e4902c6ac40b28e8eff0fd457b7b594fb08184a1ab75ad1703dd1459e0188e9c7bd6ae04ceac67f86b9f1588067298
TLSH
T1FAE00402A75241EAD06C973140932B692BE7D4A542B7035B5F68066D7D273606EB1F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 aefbeef745c946b71082ecf727696c92ecf0f873ae411a6cf943456c324d393d
MD5 de0bb4f4e34aaf4d11e14a263135948d
SHA1 83b603112faef2aebd887a96046d0d3bbbc124e5
SHA512 3eed3a6d4d957e5260a75df3170d5a7c2c81ca7b0f1c61f8b436151da7598ad62cf97f7b238a173661aa89dfe37ce5f8a510ac7e9e02bc3766bf379ef85be88a
TLSH
T1CAE04803A38282BAC02C433000C32B143BE3C07002B3030B0F240A2C7C273202CB0F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b9e0c99dfc4e9d576858a4da40d1256e93d1fa221f94330b4de24f9fdba3c46c
MD5 69a79baf3985ba545035b86b48e570f6
SHA1 23fa75feb918ef5a04f3e68bb3bb92c14428f361
SHA512 a4d09bbcfece0dd1a64e1e9f8598bf7200844c84205350662f9e94c354d818d644e142943b846d4af81bfc6189b824e1f724558e25f9f2e33eb911b6ad98564a
TLSH
T12EE00127A38292FAE02C533140872B183BE7D07103B2131B4E340A283C273242DB2F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 38e4571ab862c6c0584838f7d4738f2a0a6e63f5ed4be451837730609e18f91b
MD5 9b69b18180572aa88148852df9a6d1d7
SHA1 b0b0edffce1e0e1b73744b9e7da761110d123c82
SHA512 35649f219767d118335a82496f62aa881fb6ae8facf2fc71aa90e3198e43bb6fb2a2879d484bdb5b0e612f7be25b60d0117f9769d8bb993af6d7eac1d00bc24a
TLSH
T138E04403A30280AAC02CA33000C32B283BE3C0B002B3038B0F28022C3C233202CB0F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e005228fd44bc30cc46ea84477342034dc7bd8ccd9502c37094e12b9caba2b93
MD5 5ce8e9bc4785b3c81e048f77e59b140b
SHA1 c497b12a05d3f2d9b42d16d9a600e17cffd76046
SHA512 411608080bb24cce0aca2898bb566e7f91077761d7295b0468e54564f7a2f79d6b1a7070ca040ed3c577475ad1730de909315ffc6e884bacf2db5f25af770395
TLSH
T1EBE00103A38292BAE02C433000832B183BA3C07002B3031B0F240A2C7C273202CB2E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe593c53.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe593c53.TMP
Size 392B
SHA256 dde0b11eafe35663f0ea797d0b09aee66a433a207ab6a8a5d584960e44697119
MD5 723d4b32ce6fe00d39b4ee9d5790b54d
SHA1 3a1e192e6689fc158b784332ab807bd53d14f81e
SHA512 ac1273d6c4ea16b09978b0f7812d4e83616aed243a1de2595726b3a11f5b4e13d01ef460616564f76b599eecd5cab4d45d7cbbbdcba8bbe1b942d8dc20f74f62
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 26a9e52c96141e5a4837493afc45c4a4aa035595bfc781ddb4709c1816314e46
MD5 42ecc5f5c21171a5c15eccde46942b04
SHA1 95df8522f4de2ef69aa62762285fb6e2cd91419c
SHA512 a9f9731436482058148576ea30ab37807dbaf28d7b364b029aaaef7994de55360e6111703b306df64590774797988d54af6e8ef0d406b2eadf10e2a1a474b875
SSDEEP 3:MsEllllkEthXllkl2zEjlbzl:/M/xT02z0
TLSH
T1DF4404057FC40415CD0171705015D3D41371D414071357433C51D4535DC5D405C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6803f5eda62a140952af38a4a7a07075d753e27d44ee5c4b72008222bcb665ec
MD5 fb3126a6962b7927162606caabc887a1
SHA1 9d03d108d5a71929f1801730ee32afc36309001a
SHA512 7a831bfa90eee100ec489469c37488cf58732d7d2ce0ef3ce86d8825e9bea258d720f7f417e62ec96ff6fb75a0db2844fbc77d8c7cbbd219feed74300da2059b
TLSH
T16E41EC5CB6EA1148B3B76F459BF6686D547BB9732E06945E10110D4F0A23B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

0c1bcf32-d20c-4f92-b004-ae482cc2e678.tmp

Path C:\Users\Admin\AppData\Local\Temp\0c1bcf32-d20c-4f92-b004-ae482cc2e678.tmp
Size 2.1MB
SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
MD5 4cd67032e35fa92f5182df10df289906
SHA1 9210bfc66bd808ffcd7c6443e160dc8d6754c416
SHA512 f3d83f6e77e4568d2dae539c95acf0a886926a001b4d80f0ea602387530fc333f688ac031b3057e1c2b0375426cf47ae33315f7da9ffaec601102be0bb7221cd
SSDEEP 49152:ykR5Xz/3zNOm3NOHF4+n/UlfmCSJdm8IKXmiQeujzX:DVEkNOHJQOtICGb
TLSH
T166A533BB93AD6C15F3A88C67DCDD498641C2798E6161B7F619837C282ADC07CB47CE09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b72ddbde-608a-4dc7-9219-a93bd25272bf.tmp

Path C:\Users\Admin\AppData\Local\Temp\b72ddbde-608a-4dc7-9219-a93bd25272bf.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

4b4c333c-10be-47eb-9bba-95a29d642bc2.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4996_1499398465\4b4c333c-10be-47eb-9bba-95a29d642bc2.tmp
Size 3.0MB
SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
MD5 06f47f5ad37fb94be87982adc116d012
SHA1 4899ca7b1be75f8607b00b59b8469c8072f514ef
SHA512 b9ccbc3f2c45eaefcc4e157fb19eafd10eb54465f514ad16ada25e81390c3d577fa52aa6fc03461de6726694cdfda15ea96c5420609ac7a426e7b5afa43cab46
SSDEEP 49152:nqSGYpZHVTcorMCTt7OQvYilFbQ0NyNLvTAIPvWcfbcFlTfTGquf:n5pXTcoYCTYQAybMg7cfbcFPc
TLSH
T159E53395F69FF0F4D9A5F3317F8C765F16AAD387A30091D84283204A7BA9E210A5DF60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4996_1499398465\CRX_INSTALL\DevToolsPlugin.html
Size 220B
SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
MD5 0d09cc16eebaeae80fe58be258501fc8
SHA1 898cae597eb3039e94878df3eb5ab1c012bb5264
SHA512 f90c0ea0174598146450074c57344765b725ac0e44ca5c21f979b8f77370be94940aa53b684d9ef1e77c3090926e2004a931e6c0bfaa1f5bee3247a55799ff83
TLSH
T131D0974D08CC55A2432004636A26BC0C3F4CDA20813BC6A3E878C1582022EBC80D0880
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4996_1499398465\CRX_INSTALL\manifest.json
Size 766B
SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
MD5 c447a41c21cbb2bf5411029cb0936e13
SHA1 07acb13340be463e041ed22a2b26d5b567fd2023
SHA512 32fe5b340df5d7193bfe9bdaaccfadebc0e2c945f6cf61871f106e18daa4ed164aeb0d39f5552a09e3ed82104d69885288c8f4bc596a4e9291cdf627b57edd6d
TLSH
T14B01757D889FC8B782394B016893C48AF3354B5EA400A20C79B0C05C8871376E913629
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4996_1944106105\CRX_INSTALL\manifest.json
Size 658B
SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
MD5 2cf796650e5ad5bfb6c4a421d81734be
SHA1 79298d3cdd584b290d825d6fff4b857012e71992
SHA512 1ee7604bd7293d6296cf1368ed0dadaad7359f4d00be75e7730a9704b2205438a06ba7361554437b3e6ef352482011a90500769ff713949716c24355ee742e33
TLSH
T17A01233A268140F238347640087155A4F176620B9100F8053835E36EC460BFDBD79A6D
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 9KB
SHA256 0848af963166f2a0018a1950164cdbfccf63f04837b12f47ab84556ef860705b
MD5 4e55fe6452e5c2073fc3ffdd71f4e71c
SHA1 3547734d2f8184301a312975504c7d647baae45a
SHA512 82845613983842bf2a0a14e4e43dadc66cf78597e25d661b60156a5005d9c19c4c23a77c49d34be4d65f3d8cedf4c03cfce15908005570ffa2965d6da827e164
SSDEEP 96:F53Jj184gwdk4+FpgJ6jVjltWlrb4AfaZkQU7Pjbwbszop7pgJruCiKpgJnIuF:33vIpg85hD2+eOHpg5jpgBIA
TLSH
T10F22104067EB6509F2F75F72ABF27751AF3AF9119A099A0D019042090D62F00D97DF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 12KB
SHA256 23cfc71abf247cbcf94ca924da247d951c0013b098ffcd005b0a1498a9faef32
MD5 c1b13da1d04c6b8f48603644effe5979
SHA1 26923dc0bf01e7329f41bb117897ab3f02e67c78
SHA512 073c4364cfe610b3aaffe8afd28b1e7b61df7e5c2f01c9ff8feb210f509c6558e16b3cb3894e92f842ddbda29fbbae22a9779a7ff3cd695ec75d57ed6d82a0ce
SSDEEP 96:TFpgJYIXzC2wEC+FpgJj184gwdk4ZFpgJ6jVjltWlrb4AfaZkQU7Pjbwbszoi7p4:Bpg6ie7YpgvPpg85hD2+eOopg5cpgBIA
TLSH
T10C420E406BEB6509F2F75EB2ABF27655AF3AF9129A099A0D019042090C62F00DD7DF37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download