724354c1e4f45177383c20debb6a0b1d511b4a55ccb6d5c53c74e19f8342d7c4

Analysis

user interaction
yes
max time kernel
628s
max time network
632s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 05:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260930-genrssxy6n
SHA256 724354c1e4f45177383c20debb6a0b1d511b4a55ccb6d5c53c74e19f8342d7c4
MD5 718f87ac8add981cba38b37f6cf4a750
SHA1 097aed95cc024878a5c62f32220b8eb9b62591e7
SHA512 5d00966353b7fd19ee1f4f095cacb11d18abdad6a3704e9bbe3a5267b6923512923387eb77f982904401424e32d2fb9a536b7ebda5da0df3a2f2b8353c465c12
TLSH
T19B5122668B6FD8632009D2897120B389608B4ABAD3D2CDFDB4DF426187D3D8689DF15C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4744	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{C33939C0-7EA6-46AF-8973-9E1762DE51CD}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
480	msedge.exe
480	msedge.exe

Suspicious behavior: LoadsDriver 8 IoCs

pid
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 36 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3212 wrote to memory of 4976	3212	msedge.exe	88
PID 3212 wrote to memory of 2504	3212	msedge.exe	90
PID 3212 wrote to memory of 4744	3212	msedge.exe	91
PID 3212 wrote to memory of 2504	3212	msedge.exe	90
PID 3212 wrote to memory of 2504	3212	msedge.exe	90
PID 3212 wrote to memory of 2584	3212	msedge.exe	92
PID 3212 wrote to memory of 2584	3212	msedge.exe	92
PID 3212 wrote to memory of 4572	3212	msedge.exe	94
PID 3212 wrote to memory of 5100	3212	msedge.exe	95
PID 3212 wrote to memory of 4572	3212	msedge.exe	94
PID 3212 wrote to memory of 4572	3212	msedge.exe	94
PID 3212 wrote to memory of 5100	3212	msedge.exe	95
PID 3212 wrote to memory of 5100	3212	msedge.exe	95
PID 3212 wrote to memory of 5292	3212	msedge.exe	96
PID 3212 wrote to memory of 5292	3212	msedge.exe	96
PID 3212 wrote to memory of 5292	3212	msedge.exe	96
PID 3212 wrote to memory of 5004	3212	msedge.exe	97
PID 3212 wrote to memory of 5004	3212	msedge.exe	97
PID 3212 wrote to memory of 5004	3212	msedge.exe	97
PID 3212 wrote to memory of 5640	3212	msedge.exe	99
PID 3212 wrote to memory of 892	3212	msedge.exe	100
PID 3212 wrote to memory of 5640	3212	msedge.exe	99
PID 3212 wrote to memory of 892	3212	msedge.exe	100
PID 3212 wrote to memory of 5492	3212	msedge.exe	102
PID 3212 wrote to memory of 4608	3212	msedge.exe	106
PID 3212 wrote to memory of 480	3212	msedge.exe	107
PID 3212 wrote to memory of 3516	3212	msedge.exe	108
PID 3212 wrote to memory of 2072	3212	msedge.exe	109
PID 3212 wrote to memory of 2072	3212	msedge.exe	109
PID 3212 wrote to memory of 5840	3212	msedge.exe	111
PID 3212 wrote to memory of 5840	3212	msedge.exe	111
PID 3212 wrote to memory of 5840	3212	msedge.exe	111
PID 3212 wrote to memory of 3304	3212	msedge.exe	112
PID 3212 wrote to memory of 3304	3212	msedge.exe	112
PID 3212 wrote to memory of 2244	3212	msedge.exe	113
PID 3212 wrote to memory of 2244	3212	msedge.exe	113
PID 3212 wrote to memory of 2244	3212	msedge.exe	113
PID 3212 wrote to memory of 1788	3212	msedge.exe	114
PID 3212 wrote to memory of 1788	3212	msedge.exe	114
PID 3212 wrote to memory of 1788	3212	msedge.exe	114
PID 3212 wrote to memory of 1400	3212	msedge.exe	115
PID 3212 wrote to memory of 1400	3212	msedge.exe	115
PID 3212 wrote to memory of 1400	3212	msedge.exe	115
PID 3212 wrote to memory of 1712	3212	msedge.exe	116
PID 3212 wrote to memory of 1712	3212	msedge.exe	116
PID 3212 wrote to memory of 1712	3212	msedge.exe	116
PID 3212 wrote to memory of 480	3212	msedge.exe	117
PID 3212 wrote to memory of 4528	3212	msedge.exe	118
PID 3212 wrote to memory of 4528	3212	msedge.exe	118
PID 3212 wrote to memory of 4528	3212	msedge.exe	118
PID 3212 wrote to memory of 2364	3212	msedge.exe	119
PID 3212 wrote to memory of 2364	3212	msedge.exe	119
PID 3212 wrote to memory of 2364	3212	msedge.exe	119
PID 3212 wrote to memory of 4452	3212	msedge.exe	120
PID 3212 wrote to memory of 4452	3212	msedge.exe	120
PID 3212 wrote to memory of 4452	3212	msedge.exe	120
PID 3212 wrote to memory of 4776	3212	msedge.exe	121
PID 3212 wrote to memory of 4776	3212	msedge.exe	121
PID 3212 wrote to memory of 4776	3212	msedge.exe	121
PID 3212 wrote to memory of 5856	3212	msedge.exe	122
PID 3212 wrote to memory of 5856	3212	msedge.exe	122
PID 3212 wrote to memory of 5856	3212	msedge.exe	122
PID 3212 wrote to memory of 628	3212	msedge.exe	123
PID 3212 wrote to memory of 628	3212	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff821bfc188,0x7ff821bfc194,0x7ff821bfc1a0
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,1541497854175477229,4767133678259455493,262144 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,4653845217982030465,16718817859256564196,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,4416253352743121585,4282119317221939944,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:13
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,8712383414208773130,11552599564718447599,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,7783528564720591899,2205709117479286875,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,1708766406788495816,4399833707737084372,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:9
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,7115471763703264755,2383822786699056789,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,9993682019887078476,13032808275632495980,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,3165829868506507354,11954452280472736323,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:14
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,3159279767457965717,15940940044463205404,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,3159279767457965717,15940940044463205404,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,2200609774801367784,16594416784008526591,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,16738092441646409112,18379404159133207395,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,14865188241338453483,5390549298047960859,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,17654506194687614251,17357810425407805852,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:14
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5612,i,14387364032447234812,14480986319860912338,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,15383671939964537424,14168647965762069419,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:14
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7068,i,6080618648847867928,9437738629253244085,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5024,i,3055392309579284475,9621342097710667438,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4152,i,12677222157575578973,1582253324811303641,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7260,i,5379193807000273811,12457688950185932105,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7264 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6620,i,18184830702731858770,7716588220649403635,262144 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3884,i,12035977890768534622,5494205449061499642,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7172,i,12771424554666866123,7836469289906045550,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7528,i,15649755593848413571,17550167029218234987,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5028,i,16256805373923689726,7938115165091786215,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7616,i,8040410832424952212,774550369065656473,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3688,i,11761560363298421472,1432039513677078452,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7696,i,4582189907206159042,2287340358714039585,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5580,i,13551746427899752979,12838184936108989697,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7536 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7800,i,2904567336850726422,12174097431316917848,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7772 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5988,i,2119645211579523141,13005116201628675492,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8196,i,15201164661697435008,14169171356635193180,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8212,i,12773739691397002726,6824670739797501059,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8260 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8224,i,16938684537327400490,4346393853181468541,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8736,i,9432188121266249941,745651553488549635,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8804 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8712,i,15936358512947951556,1324937656445838499,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8644,i,11708669155745603856,5155136089221634642,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8800 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8748,i,14264493711106377840,4584622844429220602,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8820 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8760,i,15737268192986120955,4353512817276125877,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8832 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8348,i,9108355330453330558,13358639959849135420,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9280,i,9119305231743917687,3135972886881680833,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:14
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,13534389075565010032,8732225909226348295,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3860 /prefetch:14
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9172,i,17586942583026349716,4952611277763360069,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=9252 /prefetch:14
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9180,i,11078833584844751468,1490865068149117832,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8688 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9360,i,518104956640911229,581899883263610187,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=8708 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7420,i,16667089356427383965,13014970690317290423,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8708,i,3018071804715693102,1406008646294130791,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=9244 /prefetch:1
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8600,i,7305789808186699978,8375651260167224908,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7456,i,12841841479262073052,8919644152656247958,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7284,i,4849461261027533718,14053079945046648432,2097152 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=9472 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,3313150571222312767,498278151542136384,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:12
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7376,i,12085952923098830969,3447368700492245844,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:14
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,8428142106878318528,12787130590367514665,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:14
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9848,i,9237018923255022949,7391117720961641349,524288 --field-trial-handle=2340,i,1535565026200233564,17964911141128563751,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:14
  2⤵
  PID:3408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5956

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:6036

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3996

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f9af9939127779a2304c7e0b3b962c46ab4bb8c3cea7a671a56d39deed8feb53
MD5 6ba41bf7b7c5ed39e343743795b51a10
SHA1 938032c366dbf2f751dd5b72e2d990649b9d0f9d
SHA512 0b2c4cafde141b6a1f1f2d603019d6482ac2d80ed144a971391526a2793410c2310693c589a5beffd2741a4d8373faffbfe32c690e21b2ef796b273a234635d1
TLSH
T109E086E487CAC27EE609644742A8678CC2903F0B96CCBE5E27049CCA71C3548F6F26D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b49e289577fedef05b22755e25aeb3cefa40f6277a67bd27017ac591b028cdd0
MD5 170cf500226757c3c0c9d81138d8b6d4
SHA1 ce4c73c398a2df7298cce9e3f9a6a8e86c57aa92
SHA512 275d7124da8c527117a3d896b085a25db79b2d958130d3e3d62ac79c7ecd82a1116637e7963a244d5cfbdffe8e2908acb98304210cff181b587579ffaff8f504
TLSH
T139E086A49BCAC26EF358694743EDB78C92903B0A97CC7E5A17148DCC714155CE6A3AD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 edf81900b084e7ecfce1b955db8bacf61c924f26e7b0b9c80d00a7a2efc7bf14
MD5 01e4b1ab8694562c7a1239d953de306f
SHA1 c09524c5d4176c4708db624838ea4066835b7963
SHA512 faecd739271a6fceedf1c6d29646055cedb669539c2a23ae1b8cc95a62b6d103282a46bcfa0f47df5dd704ef9cb5d418b0dee63a2110ff86ed2f73cb0054a055
TLSH
T1A9E020DE4BC9C39DD204E44742D557CCD2813B1E96CD7E062700CCCD7106448F6839D0
MD5 SHA1 SHA512 TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 68KB
SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
MD5 0e776a9829f2513dc6b150e6e74178aa
SHA1 60fcee40a3ce00c80e125cad5c0a55fa02d15f2e
SHA512 39f0ccd6a44b69d59611679d725ad12187393d9628d977f9848796d5855fb145f3bfe2a3998bd2bbf8b5240c33cd6ecd9d49ed09f4d0270d5ae40558cf7acb54
SSDEEP 1536:H51miTVgrQ7JaUf76Z+AGYguWv0KxwhGPkMxOIdzz/SIWT27zQMPvp+elQDQ:ZYMR78X9GjuW8KxwhGPkKB5JWTMzz5+e
TLSH
T1026302329668F371BDE5B98DFECAD32F58485C204207CA11167E3DF3852549954D8C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 44KB
SHA256 34a6a0b4c6521f99ec398ce7663437ea2cbb0d86b4d1322f65ae2b45a53007b2
MD5 f069cb36af3b6c360161ec41ba4e24ba
SHA1 98c3aba0d33b9daeeda530528c6d8a2debcc1067
SHA512 0ea2853fe3ff003193dd3aac8d7e895b91513dbe13e126a540462207ac18c215eb753ed77eded3a948ab5f0adac084270bccce77abf77ff99d5a375a5f607043
SSDEEP 768:DkwV7Apz1QrSXVvr4Qc/8Dc08rHPTynh06oYE7BsMlu1U/zWbw+FaBfTPr1feVrF:DHVsz1Q+Fvr439HPTgx5E7B41U7V+FKU
TLSH
T1F923021F23F52C97C23D1E603BF184E0BD64287CB49163E0A11B50196EB49C7EAB89BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000126

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000126
Size 23KB
SHA256 926f0c9a413d7e94ec6c73c3c8ae01cc31875d915b2933131785a6033fe5ea0e
MD5 6669d2a9cc5a7b9c190a2a5f13195ce5
SHA1 f27208e8e9a10a6aebd2ed6aadcf228ab104fd5f
SHA512 e20fc51ececb81bbf191f83dce615da45ddd3998f03b90c838494273fe3d4b6c77b5e81b056f3744890cea149bd099a5ae167a60ddd89d4103701d29b7f7076b
SSDEEP 384:ZWA5lgiqx3f+WvgMRdKpoLHm41xoJ1B3tadL14TrfH91I8Po:Q+giqFrTR4IbnK73AL1CrVc
TLSH
T17FB20114E724B078C217BEAB444DB6A79F2BCFB394002838561687EC23EF57958D352B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00012d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012d
Size 32KB
SHA256 57c955ae9880e0394307c85fe9fb38a455c356c818e8cdb6e92282c003836a25
MD5 202032da69d0abfb0215d4c8a802af78
SHA1 28e8a46e3119f80cf626de2727693a14641cd387
SHA512 e9147a56703b1c2afc937c8bb849d52de1d2aca5d2e0357f82fd18796356c059a8ad3bedee111ab1667a980d30e4a003606100bca965fb3b2bf8a12b546f882a
SSDEEP 768:sWOVFe924lGzYCOSWTGMt1triyIvpglfhz3Vz6XDCc:sD4Q+sYCfeViDx0Zz3VyDB
TLSH
T16DE2F10B2E7227A2F4D904B2246075E7167BDC048B0E6F3ED220767D9D840C65E5EADF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000187

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000187
Size 1024KB
SHA256 a98caab34b4a82b46d078a4ca25bfca11d556a676df6e88784c1057dfa48dc90
MD5 b2db600743113b5602a4176a5a4e410e
SHA1 00c00d815b5ed3d13a4601d33fc500736a4bfbb4
SHA512 420c9a6bf19d8985c730ca967ce7a0a29e08ec2a0baa8d3d39ba2e08e0288b995396ffbe684a0d46ae543c9063c2555f93a715f0208eb9c094e5891bba5b2fc3
SSDEEP 24576:u/XoGXLcEWzyU/GsavJy2mKWS5JcbHgLsQEAJ0OF:u/XtcdZJ2sbNQ7
TLSH
T12A25236473C90C1BC2B5437E59FA174A7BE1C41B2B86C32B3458B7A12D2B3AD9B446DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000189

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000189
Size 47KB
SHA256 d8f236d7ae9fd416d2c70133f67209c7476722d680e2aa5b005d41aff9523477
MD5 f471e7bb16c1f2a74f2c31cee62a8e68
SHA1 84b5e03074aea460db761b979f61ed2c7613e33c
SHA512 a81894bcba6d1a99c623408ae12996da97cfe1597fb642f9345195be26cb415409bd9db6a590822e7d5b68812fecc584c7a88f9a378173eeae1bbba3129d9295
SSDEEP 768:wY80eqmy2dfD4UpRNcZhAzY/DdTy65W4+u/trQCyy/O9wX71BlmsXaXQuPq:U0eqg74UpR0hAmB95W4+u/tyy/OqX7oA
TLSH
T1B223F2BF76C82809CCF5427AA3D56F7A8BBC9CB650524E5045C1707F1299EF9F62042E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000191

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000191
Size 1024KB
SHA256 e257c1dec2fa4ce7843b43189fcfdb2869fda2ea88e6282c5fe03fcc261578ff
MD5 3d43608bde226260c83fd45cd3f9a032
SHA1 30dcb61ef248a3ed13af1661c0db2803e5b5ce93
SHA512 f548cec3fa7322cc9f5ce8cc395f5aa2383127536f7a62bcf359a9fb505af90108244e6f54530f2ad7d60f1f45c3e49322ef1875ebf7156d9488d765841e373d
SSDEEP 24576:ma14jeDAoNrm2yggwqfs3FLAeH/eZ/fdQr0P3n:V16eDAQaigwys1PH/k/fdQs3n
TLSH
T115253393257118DF9C6735B18F1DECA051AB6B157F8BA083CC24E9B14B1666FBDC2A03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000192

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000192
Size 54KB
SHA256 0ce46308d5c9e28670a565a41621ee9d0e2327ab61df25c790b1bf6684e5c94c
MD5 e49c90d1cbe632fc061eb1c1036a3db1
SHA1 98f06ec3e6881ab291f4a75fcffd967524a2316c
SHA512 00b1da05c0b9617b3168f868eb623eaadfe36a703bb6e6f3e5b35aaee6e7d838c0b8c67b579ba32853461f16ca9fe9d41fced51798734abf3c2b8caf0311c7e7
SSDEEP 1536:y5YuWWD5G9O/xt4qe7MYUCDlatvpb84ANFnAzdnu8E3AmXPbX:mYGp4qeFDlevhANlApPE/bX
TLSH
T17E4302FAC5CA655685F65623B83A324D4DBBD3F83053AD03F0A7A8C02C6C598D1C697D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00019d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00019d
Size 47KB
SHA256 ab9468f581004a57bb76f05694454abe3a55c0edfbf19e23202558ee83bc9102
MD5 330891afb1ebc94708e71fb07d12edf3
SHA1 18ccab57b7dc551d1a8864b6cd0b9a00e7598b4c
SHA512 f5dff74f66f84559323ee3ea532c9a1a840dba14ebecf661ec07a63a7ff54c620de93c51e5e0fd21bb864b807197300038c73f9ee8f8e7fdf58faf6179b494bf
SSDEEP 768:+0eq6/CtA9e0TGXSrudbFq/xTgdOI64+y97RbN9Ck0uCxD+YxtVs9:+pq6doZoaQxTK64+gRbDCka4YxtVs9
TLSH
T1242302AF6321FA44D0E420360121C7457876E470B5F26EC3D50649626C4B5FFBBB79BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001aa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001aa
Size 69KB
SHA256 15151cfa522371654324361513c70d58e5dc9d9f2780e05ef23da3707571ca5c
MD5 e0d1b223da7a8e2771e6b69f5791ad18
SHA1 0cb817c9785955ceea766c7812bc6fbe1c89e880
SHA512 da4cfc19a6270778cbd7a247f150f602b98dba4b6e3c20c8f4239578035deaf305a0a4c19260ece4a2c990aeec5067313fac024ca0bfbe9c6b977c86e7c5d29e
SSDEEP 1536:VKFA+MA2JCR2fQNwtJJDRvfphoa5SEXZQZhaf6ugzjIOcElX2e:cK++MsfQOtJ9R3phoa5SEO/frjFcGX2e
TLSH
T11D6302C109AD885CE8145539FBD4D051E215C3E05E299E4AC9F898BDE7BC728EB2CEF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001ac
Size 107KB
SHA256 415e187fd1ad2d3509db5a13075b6e8e25b8c4d8ccef4e4c0cccd15976b5273b
MD5 acb9c484e765112d4f84ad1686246b2f
SHA1 6c043a1e728aab978812cb84600ad6c57b9a46be
SHA512 197804b21c0e688e9f288f46df5d3170f9517b7a521ef109a8f6194cac1b23cfd8c9c5b0feee25a6a82cd05d184a5b7feec206a7b91d584d6fb21ef92bf2d2e7
SSDEEP 3072:fJXZEVM9RYkvwC4amobG9aIqZKRJm1yMcj1ca44W2:fJuMy9kKRQncjk4W2
TLSH
T1D4B312E4BE3E9134EF285EB483515653B42E119E0635CBE219DC2B7EB81E442BE11A63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b0
Size 27KB
SHA256 f2a6aed6c79a3984fe2472397aaedcb4e37b1c9f72b279d5d03bb47a53003ead
MD5 14716bf68a14489a213c1ffe999f0260
SHA1 d8d13ae0eb4cd7a478bad1da2e06a783e831e4ee
SHA512 04b854b436c45ff267bc03ab91c0c0384f0da1797a5c88684b1c1e9392a20163b0c4525ef4f3cc5e6fe895a06d7c501ea4524e94f4e1aed9130b0b7f0312d276
SSDEEP 768:IwJseqRyv21RiUVPjEgVLWZ0I6AhrO8hqi/:bGY21j7/SZT6Vxi/
TLSH
T1C9C2D014BBD622C2CB46BCF53E21A31FE24D4A6A616823618951A1E8CC3E17E1E115FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b8
Size 67KB
SHA256 197ed5a1874afb6145d80f30f7a684fee5ed06e1d6ffdd8c9cdf8db941139c6c
MD5 f0d668259fb6645aece2a14686e25fcb
SHA1 a370fa14ac8d3d1f1ddcc1f029fb9352466d2f1a
SHA512 e212de5f3dca7397e1ee1ea08bd49e5ecaeee26ebf3b10a1b962600f320b037ebd888bd4ef4876bb94738bbf65548ad74d89d7bab8b10812e10235b1f9849fc6
SSDEEP 1536:eWtN7CxKo8RPsRIMjWBCy+DrMf96BAoRlUO5WfuS:nhlorqHj+UfmZWWS
TLSH
T14E6301E26702AA6BD04D29B03E3A629678329588D15737C6ED3FB4F070FCB525DE7580
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001c1
Size 56KB
SHA256 ef991e029faff7ec960a5aa97aa84491264f7f9e542ec0f6f59aa2e04799188c
MD5 44e6066d73bf781b092a6cfdbc9a7414
SHA1 829f99e88f8917bce72ce8ed5961d8eb5490b38e
SHA512 0d4bfcd04a98e60edef2d26649ca8db2c07c2b840f275f6f431342e0f67f363e522ad7032d8a026a7401ea78be5a7cfddd55fa62f350a0a57f6b9229a63a7157
SSDEEP 1536:1OJ/WJcAhxhFoBjzN9QEW6bC9SQjzVuNeIS90+awSPj1n1nSnE:1m/2vFmjzrQ0bC9SQN9QwSrN1nSE
TLSH
T1F64301A9E6106C5BDD8B87BA7CBC3C181A236A704F930739C2659219E7829275F3DD14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001c6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001c6
Size 77KB
SHA256 4ea4eefae5d8fdb08cbe08e3885ab542272770e3d0baeeb057b712c676d54e8c
MD5 589eda1ab0b4d144aee9d0ed3b70a2b3
SHA1 a5d3ba7f2bc0a32fef7808943b706e62e9c87223
SHA512 be576d5d505dbe7b35eccd0f915cd9a8c96db53725bd4dc4a6879e1af468645352b8758227e3236bd2a513320896946aa7564fd976cb3c05b7dd5b9603f4d12a
SSDEEP 1536:l3PIORyccKAe2WWrm30hbYZ5oqi+RLIXwrsWEel3IRTRWia4pdo2nC:xZRy9WAm30ZYZNDCgIeJIx1a4pO2C
TLSH
T1F0730222D0801E8EF8204CB16F3EDB44A5D546AD709D190ADC1F56E1C7B9BFC6C62D9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 325e8b003c56e863df669eed8c4bc4c4ee633872d064dcb5b7a259d5f4708dff
MD5 efe19a0c9fbec148d61a71feda943e53
SHA1 7235a866392040781e7a16e711a259054dcd2ab4
SHA512 0ffafcb178f5657f31d75f54d0cc49b74ad57a0b55540b79a9533ab2cedca960702a2526d42e8a623165f87646d9b484cf983766474a25df6d2654867cd8578b
TLSH
T1315192871DB18070D76840F4C4E023873EF525B02AE31E0546BBFEB4BF8E3D28189828
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 bd33aaa1c1181245b619fdaa329d6fd6a3dc5b61745224b108ae756a36eaee89
MD5 809ee181e8e3156988c40e194cb3aff1
SHA1 b0e147e8c98ea67cd6428c15f975408ce0b13dc8
SHA512 091c2f757a914f1babbb6d945ae3c8b9333fa512fec3d82b0d2f6a7b67538c4d2d5539364e5b49107ee6091909e3aedcd67af2d4cb5b77eeb93d6f4c60d5eccd
SSDEEP 192:I2P+DYFu1f6our39g/qRA9qdPXqEFr6gft:0DHQJg/qRxd/qQJV
TLSH
T176123D8598FA9531DB5905B391C149423C7920A159971F8B27EBFD383FAB3FA2008B7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 11cad511cbbc3b09f61f2f0aafebca113a8070b30ba50711fe3262552c71077d
MD5 b23d2c553b2cbab7f1e5ce58bdee6169
SHA1 6242d374d9f08dd2eb7cb6cb6aa93fb862d370c2
SHA512 d9b723facaf17601f594ecb4fcb528f09602abc3bcb0b9fa785789482314199219c037cdde4f75c3e7127c491f32b57483e93d5f27349464606a6319cb7901c1
SSDEEP 192:c56286DYFq156our3ig/qRAZq+68qEFr6gfL:I/DjW+g/qR9+vqQJT
TLSH
T107123F8698FA9531DB5905B781C148823C7920A154971F8A27EBFD343FAB3FA200CB7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 86adc2923cb54e6daa98c2c3772523b33db5f9c4d92b89b08e8dbdd94f80e747
MD5 0b997be29037be9f14f5cad093f9b007
SHA1 feb7a6f79b628cc4f027e704f6eb9dc5c0261a9d
SHA512 27023266da499a3b755a7795470133b3fe029d205fb98b1608523a93f8df5e0422654605a1f61a52029beac1f7b254c6d3c49b8f227b9d633bc3fdf1f48f4810
SSDEEP 192:b62ttKYFf136ourMg/qRAHqXPDqEFr6gfy:bXKW4Qg/qRfX7qQJ6
TLSH
T12A122C8698FA9531DB5901B391C148423C7920A159971F8A27EBED343FAB3FA2008B7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59cb07.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59cb07.TMP
Size 2KB
SHA256 cfd550d296448ad5af7d92579216ba66c34a70ad88ea56dc13f8a4b1f0f63f9b
MD5 0e713161f78df52cf0743a9650f3e425
SHA1 ccb8455ebd66d5d489689a55ebba99b07655d546
SHA512 e268eebe2a081f53e6e9b84456a45ae97507af6a40732524e3b00f2fd64984b2ad7a3e08ea53d03d1fc622379625a4200440623d5e15489a040398826c086842
TLSH
T1455183871EB18070D76854F4D4E063873EF565B16AE31E0646BBFEB4BF4E3D29189828
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1f1d83bb2151b90701ff34d3f39b684aa4e0acfa6b2cb1f6737b9e34e258024a
MD5 d828259cf62f52e6acad67a096993f3a
SHA1 84cdcefec7b08c1b8febd1da1da319b787deb75f
SHA512 8141d63149bea530b0dcabebc069567f6e1dd83f7134f297dc8abe3a88affd012c451d900d08c86b063a2873851fe73d50ef1a9b3f4023296a03a4dc1ab065a3
TLSH
T1DA41B2F3C3E8867DC90156F4AB186E2BCE2D0915432C7D5AC9E4AE1F93E24B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 30KB
SHA256 1e9e86c045fb6de728846ef9285937b4662c66caa61ba3cdd31f3b3afcbd0f8b
MD5 8e10e224aa0c19a34a046e4b74a5474d
SHA1 55755cc3f2fe2175b5225cee025007d98f33bcfd
SHA512 0f0d4ce4231b653c71d133d0e7a4142b5c7d313d60ebebb2763aeb5771031e7c9d19e310b1c7998437300d86a2fe46fa6d7fdb5774b03b8f1d74a2ceff62d466
SSDEEP 768:dNgCbL9TyI9KGfUSGREsZpJNDLh1RmxDW0TDkuDo2LDDj6ZJohtDY9Kb7Le3gr+8:d2CbL9TyI9KGfUSgEsZpJNDLh1MxDWe7
TLSH
T144E2DCF3C3E4CA6DC91162F59A153E5BCE2D0828876C3C5B89D59F4BA3E24B1D18168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 35KB
SHA256 2ad8a8371ef85af1e7f823aec4385cee4e115ac0158b3c9bdafd37b835191117
MD5 465ea5428eaa76079a5ddd552e1e3732
SHA1 0d7cd3120ce87041ead29f12316439a00222225e
SHA512 f56da3397c4dc693a1828e97292a289055625739a81ef14e1a8e3d4ca3df9fef3f0b4ac5db933e76e117e67317518c8919084c38429a7b43566fd350e05b44f0
SSDEEP 768:BigD9FzITooDpQhnmRXwaUwj5oAnRsRVSbFd2REtWYcHcDY0TDkuDo2LDDj6ZkoO:BjD9FzITooDpQhnAXwaUwj5oAnRWVSbd
TLSH
T1C6F2DEF393E0DA6DDA1162F09A157E1FCE29042487AC3C6B89D59F4793E20B2D18179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 42KB
SHA256 5327201c91d71d72218f8d029d8f3228173dae44e029ce25dbe016751ac0b909
MD5 ae2da22519a95f9b0199fcbb906a92f6
SHA1 64deeb2fb0cfb374016d53724a1574deefa60c3a
SHA512 0362901aa5199c866b5f5175761a18b66c97109e79edf5699999deec62a933c16fc044cfa30f88c33d2dd453d1255d6033265228e8ba6115b11bab0e57571744
SSDEEP 768:WNgCbL9TyI9KGfUSGREsZpJNDLhp2yRg/bFd2REtWYcHxDW0TDkuDo2LDDj6Zko6:W2CbL9TyI9KGfUSgEsZpJNDLhp20g/bU
TLSH
T12613DCF3C3E4CA6DC91162F59A157E1BCE2D0828876C3C1B89D59F4B93E24B1D28169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 69e25fb16b5e3a3324501ec26cde295e74535167e22b00a33cd50ecd510b5052
MD5 8935b3f8383509a1d098cc1846b5d73d
SHA1 ea4e19f03b993bd36eb6664b2c9820cade281516
SHA512 43e7211ccb840838d3ca6da096973dde34ee94fc5cbe73d2e306bec1f664b49b5827bf0b832149ad245e0bad615aefdbd0095f71521d770e5370e3d985ac6bd1
TLSH
T137D022632308B0FAA97C6E81C06AACCFC37700211A53D9D814E0B8AE163546C0B9F148
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 c58647c7824063148cb512ee223b21c51d404d6568d558cc181c154e470a679f
MD5 a68f01a3f1946cc215086bec1298c2d1
SHA1 ade135b3c85dd5fd6bf1c03901879330b843da04
SHA512 da10d34fd21a37cfb68d48987d5bd38f406ab4ab2e2e60a19f1e0dd08f2476442b93f19805be34357156bbc7f5368fa3779f0dd723076442c7055bf8e102e478
TLSH
T1D3D02223230970F8A96CAE86C06AACCFC77700260902D9DA14D4689E163986C8A9F081
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 40095b65c8ef249ce885902876b24f1424f4a952125e71d08b9b0d1bd9b7d787
MD5 b092f4d24f3bb978f51c187e0e025046
SHA1 f6eb04a043e662b92bfb114e2a5af66d989137d1
SHA512 d23a3383e5a1af75af875487c2cfc18ea1de3f23abee9a349a36241cf56a49a889eb4c120a781bd6de4d0008cbb4fc3213aee2c116aeec86c4140791aad15536
TLSH
T101D02263230C70F9A96C2ED2C06EECCFC37600600E82D9E818D068AE073686C0AAF040
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 964e35cff8b09955d99e2503b40793c7a26f5ab2b711651773c6d760643094f6
MD5 0db2d7b2e0420c7c6349dfc8fed637fd
SHA1 122ea8e485a52aebf369efec9feac31d2108e6d5
SHA512 cef1a52f2eaf68d2ca1708b4db1b069094e269ad9ce7b9152cf6a7cd1553d966111dd1d826d18f9e488a6c5d36a2075f5cec823c35de1a5b58b18fb1263041b1
SSDEEP 192:sxRZ1Rpbx/fAsTHRFlzoA8p4m/g6+WNIYEluGVIgDtJ:sxRjvx/fAsTYf/5IhT
TLSH
T19F32C819AD24A97BDCCBD21DFB65BF53D2F91032A1901E48B6FC861C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7b559fdc5954de16c6b993f051533ea370114e48dc6184515a141deaa7861b7e
MD5 0e7e817a434dfcd92788552b5e6cb437
SHA1 846f4661e947fa92fc7fcd5b695e9f8d4bc3f6ba
SHA512 0a7d17150ec2deaa038361236e73332778139b8161c914e9f4801d1ed0827095ddc67802fff49d149cf834aa03aad6b1e566bb2a5f125162625a9ae0eeb36597
SSDEEP 192:sxRZ1Rpbx/fAstHR1lzoA8p4m/g6+WNIYEIuGVIgDbJ:sxRjvx/fAstIf/5IG5
TLSH
T17F32A719AD68A97B8CCBD21DFB65BF53D6F95032A1901E48F6FC8A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 848e3747f137495e4543defecc5d43994379ca11193877485a3947a7c1c6630b
MD5 552d7ecd4ee48081a23f828c5bc8628f
SHA1 a55221e9215f4bf18406ff0848e89b3fa1093309
SHA512 b4651a934650d5ebafaac15634dab24be19613bd7ba592341a6652e537be6b1e5782c5c6c54c0e8451f2acdc943b14b62bd21a73519fd5791df3e74a5f8c5fdf
SSDEEP 192:sxRZaRpbx/fAscHR1lzoA8p4m/g6+WNIYEIuGVIgIJ:sxRwvx/fAscIf/5IGs
TLSH
T1A932B715AE68A97B8CCBD21DFB65BF53D6F91032A1901E48F6FC8A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 0e62e1de712ac47239707d18de5d1715eb6b50b0088c867d835e1ef00034b51d
MD5 3c46ea2c770e73609e09dfb5e158e9ec
SHA1 b63334b4549b1ee341438e193f32b40effe0b78d
SHA512 d7dcad3a0fc65e297aa346e0265bfd49f76358589da99d27367aba8ba50c47842a17ee88e7fc98d3af2b0a0a973ff5bc8f49ae94915a818799694ab51e8f455e
SSDEEP 384:sxR4Qmzx/fAsTB2fPhsSo/5EZKJZwVkGic4:skQmzx/ffB23Gr/5Emy1n4
TLSH
T14392E85AA52459BBCCDBD619B925BF27D7F91022D8C05E8CEAFCC91C00DA6ED2203C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 97b57d90544591aa8815cbdc9ebcea9ba95134776bf2c7e8eb8ce8777fc7cb6a
MD5 4dbd11cf91b6840a0743b9a79d4a6fb9
SHA1 c067a9dd001abbeca76c489c35e23210ca6d2be6
SHA512 6e40ad73d62e58746c6788510a0ef27cd7f88b1f3573a1a242414ad76cfe84b02b81785efb1c8ffe59d928f7cc22d75501b119c365687c55b7234055349a3852
SSDEEP 384:sxR4umzx/fAsg66s8qMpRiYnazAW8pZS15posJWeT+aJ2fPhsSD/5EZKJZplTGiV:skumzx/fE4Mnc7WeT+aJ23G0/5Emtqn4
TLSH
T1CAE2F7459420C87BDAC39D19B83DBE32DAAC505255C5DEDE6AECC91C00DE1FDAB07893
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 facb1e5f073b08e81ac5cda8b6ad342b571f05f9b6f5bf32302e0ff0a083e422
MD5 4b406b53170dd44db1636bc0410783bd
SHA1 c7bff7bf584d350b46b33e2e54e51211335e35c5
SHA512 1c40ffad205d002d18ee7933a761aea21d3b5f35d2f08feb917439de6189d02330757d03fc12c072f5e62f7330145da18c273b000736311689e0d995f8ec2c28
SSDEEP 192:sxRZuRpHcBzx/fAsTHRsQe6WAbfGVoA8pXex9n/g6+WNm22EHgZ/YMvuGVIgDt3W:sxR0zmzx/fAsTm6bi/5DY//JhD4
TLSH
T10C62FA55A924997B8CCBD60DBE25BF23E7F8503294815E4CA6FCCA1C14EB6DD2207C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 1f48bf001568ae9cdb3399aa5150b6cd267e9a695ce22252a00f9de9384855de
MD5 27a4819a7e8daa188482e1c6e03a8818
SHA1 3d46fcb03f73101a1a6b97507fb334b2f5640f46
SHA512 bae2c2e84b667d30fbe3281940d9c7f04051893a2ce20a14f5255c32a7c2215f21127337cfe6cd8d1380457f17f3f0487ae8227d7ae7963625841711c317d75e
SSDEEP 192:sxRZ6R2HcBzx/fAsTHRKwQU6DzbfqVoA8p2XOLc9Y+W/g6+WNmeg2EH/EtCw/YMN:sxRwumzx/fAsTp2fvf/5AcL/OIc4
TLSH
T1D272E956A9245DBB8CDBD619BA25BF27D7F90022D4805E8CF6FCCA1C04EA6DD2207C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f409237ce9c0894ff024fe11a57c8061e1bd6409a6ea0d2b167af4b6e89a231d
MD5 b1191005087985b32f1b1d1d9ceab9ef
SHA1 1cafe3ec4acc4fdb08a498fc18236cff73aa9684
SHA512 a7f10a0704fea858e873d1342250824f19558b1f594fdb43f3488578f3b0eeab18c72006a91c039cf2520ddebff8b4888aa9f880c3a0cba6a8c213cc83e128f9
SSDEEP 192:sxRZuR2HcBzx/fAsTHRxQe6WAbfGVoA8pXevc91W/g6+WNm22EHgZNCw/YMRuGVk:sxR0umzx/fAsTr6b0/5DYr/VJhD4
TLSH
T10D72FA56A924997B8CCBD619BE25BF23D7F90032A4815E8CE6FCC91C14EB6DD2207C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 68c10f1903b9c56f8d362ed52e70ccfd768577cbb3d0ae78715d4823ab8c8463
MD5 a224e3b5abb7b0c1a4a20909471ac4cc
SHA1 eaf5c177f186701a052d5812e98919fb6ca6181a
SHA512 a2d97a187d72937ba94f117bc5e13b21a63d13eda514c9acc08cca037ef6f9eb6e0496dc0c4c2514bf86ffb86352a3264a142992c28560417e0b1470e0103756
SSDEEP 384:sxR4umzx/fAsTW2fPhsS4/5yKJZz/JGic4:skumzx/ffW23G7/5vRQn4
TLSH
T16182D856A52459BBCCDBD619BA25BF27D7F91022D8C05E8CEAFCC91C00DA6ED2207C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9a8832c563e6cd63f15107e31be3fd44a64a2d436ffeba8ee10c9a5fb4d12800
MD5 70ee8e65c9eab2316d980b09b6b653a0
SHA1 4d759c7f3f3f45d789239083bee61767729618bf
SHA512 3799d15b4690936f46f16d373089a1aa5eb33122fd1323b782fc6629ef66eaf7b624f0ac9a8457594303be16b1afb4e8fba08b886e97ea5a5d8e6489b8c4508a
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXvroJeT:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0Vu
TLSH
T15BB2DA2B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12a948b5-95af-4027-a086-b6c45898dfd8\index-dir\the-real-index
Size 120B
SHA256 73ee1c4dd0f2859e01e35455397aa27092206886578c5314f8c516f41b1ea30c
MD5 503998a857ab983864f9ac12ed1a7808
SHA1 c6c5ed452ae2e95af3b4e50dfa31222dc2a06821
SHA512 07793047a4d03a83c20ffb61923be34ea33c9d32a3dee644ecd8fa4cf40ada12b0ee86c3796d6a7f2522d0df190e4499df1f248035cf84ba72d619aa932d933e
TLSH
T1FBB012940D517641FC6145340C3B52316D5008FD641082030CEFE484CC520C78100108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12a948b5-95af-4027-a086-b6c45898dfd8\index-dir\the-real-index
Size 3KB
SHA256 7d657fef7576f3edd5a238a493d5d0e018adaacda2851d1b3f4336b87f986e37
MD5 60abd2bccfd204c598c9061310a46020
SHA1 339247ebc2bcc9919568c4957f200c40fa918bd9
SHA512 17c0001fbce0a44baae7cfc2352ece9fca802f1014a3b8376ca6d3bf154b8ff636b5ae63731144cccb5354c32c8f18add85e7761c88328bcdfb6819cf16c260e
TLSH
T1EC51184E0D472B2BDCACE6B219B50845333425CC17780F1395FED538EC83A291DE9718
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ad449.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12a948b5-95af-4027-a086-b6c45898dfd8\index-dir\the-real-index~RFe5ad449.TMP
Size 120B
SHA256 4e4f2c2a130f679ee9ce9279a137edf7e966873c81a3b3ec89785ebca1048d9f
MD5 6c4b23e990cd7a8303972ebf4ac706eb
SHA1 3b024d0915f1ff0bf92f272c31fcbd92a89dc899
SHA512 ddf54f4970ba4fde1b0b45aaf3e9b316428f07ef6727037822ed2527ee237194c6312fcb5948e65fce7d2e01b07ff10733e4d9b128dfdb9130f6770638b263a5
TLSH
T1CBB012549F811680FC5142701C43117139004C38A030520308FA80009D435948100280
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3e5d22b2-3d39-4303-b3e6-5905ee8e8223\index-dir\the-real-index
Size 96B
SHA256 559f812670c5bd40da0e8776d631c7862a8d91a4cf79ad6f388b17887ddd006e
MD5 2574843ed48122703dc0e365c3b3e737
SHA1 3a977c1c4f0c191630a9360e9de8e050c42063a8
SHA512 f6a7f5ead28a0370ae16153c20a70126d2743efc56bd4c560599bce068c62d1773cdc10d35698d68b1604b441e7cffac8a0cc0a6ad8cb30c418fbf0da70f8d87
TLSH
T1D7B011223388800AC32202B020820A2023A08C802B02BB23A3A22038E8A83A02A0C830
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ba5d2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3e5d22b2-3d39-4303-b3e6-5905ee8e8223\index-dir\the-real-index~RFe5ba5d2.TMP
Size 48B
SHA256 6e862506e5a4608fd6a9117fab11b288c3e3ce8fc3e1725c45a996f1de46bc82
MD5 de8e0ac5bf45268a70aca406059385df
SHA1 3432eb1658c4b908582bfb71e257dd100b532775
SHA512 bea839f0cd138d612baf31e818efa48a60d381c511b71ad1380916609c153695b5ed923c50e0a93130f5d25749a27d5fd7d9f2bdbdcc01934e718c9f58103882
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\946854b7-844e-4309-9c61-a036ad29d309\index-dir\the-real-index
Size 72B
SHA256 844ae4bcb3cbf91d41e87de83570d1129b6aeab1a0b3155c231dd909bf2318cc
MD5 7f61472bce04f7aee5a8766d8c2e72e9
SHA1 5a1c7561494216737cb8e39617631f9f1cdb9999
SHA512 a8fd67b0bc80ef4559929d186daea8ab2a8fbc968a6ce2d6976d1b3423b4a8bab9d387542bb6047ed25100617d1d28469d234ad0f863bc63d566d81a132392fd
TLSH
T104A0023149E61041D04607B069512271A31DDD564115472B81EA55A5DC7716E5905481
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b8444409-5ac3-474f-85d1-24a835db2610\index-dir\the-real-index
Size 72B
SHA256 326d43b4b652a9e1e14143871de046d1bf39e3eed16b49f8f1e5bade5439daec
MD5 45018a56c802c9f2371ac9cab9d96bc9
SHA1 2577e1404b4a4acfd9c2bea86704310d3e442bea
SHA512 94ad4d34375b5dfe2f8c31bf352a13a609b8fdc26330db9172a225a32de046f6769ad9e0b213dff4fa628eddb9ae9c8b5a7f3ed0590f4b70779678efffbcbcec
TLSH
T156A0029813E01121D24212B7359712C26721DD20064A235781A94245DD505A95D8130F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b3073.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b8444409-5ac3-474f-85d1-24a835db2610\index-dir\the-real-index~RFe5b3073.TMP
Size 72B
SHA256 ce0283bdddb5534debbb95a03fb7d598dcb5db936e71f994a971e576a42fb1ea
MD5 ed8139473f6597e285a30cc8d80e9adc
SHA1 a7d44d75419f585b8b183d86654648db717b8ff5
SHA512 d4881da2ba07f991f80ae3c5df9cbfa3e8ad9de2b3d106145c547420c46a9d4ea655d2d9eec9241eec1da1db2ce7006b5a69eace34abe14933ea77b36c0a7803
TLSH
T1B1A0021243C20235C41222B3155217611741CCA41500171B40DD4654CDA09454D4520E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f67fd902-3be9-4d51-a515-f8d6ca2bc8df\index-dir\the-real-index
Size 72B
SHA256 886caa8349f5e23983ab5d393b061d4346af13ee4da26182ac8c8fb78e7a7709
MD5 511059e536102eb2387fad6ee277d1b8
SHA1 81203264748392089f1b5ce20d348eec2f535118
SHA512 1b1fffefadd167b4934618e414f8c7b21361b023311dfee9d57e3d43a49f5c9e16b0f28d29830c4a6261e27d26c1f2499d8b201323265780571fa12dc3074b1d
TLSH
T154A0023321486121C21053B8708B11D2E6164D23856D220946F1E1FDD8B1560458B0B3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ba5f1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f67fd902-3be9-4d51-a515-f8d6ca2bc8df\index-dir\the-real-index~RFe5ba5f1.TMP
Size 48B
SHA256 e7ec5957ab942bb1d07bbc1e98ae1db76ee6506e3130f6ce850e87568ef2b9fb
MD5 a8754372593e8c529145e736643d71ef
SHA1 2fb08634b825bb6f589109733db68b00854bc689
SHA512 26d5f2535a3d9a13302c759110bfe87bd2bb499a8d3b92ecc73192bb97adaed624de7e5bb1161658d116df5f7f80103666952927de30b8639ba4c088c429b468
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 49a374c6379edf6b1d7f87151d1babf3bd539c4434d96dd11b4fde60fec1737f
MD5 4a086ed3d23bc0389941621614c2c8ca
SHA1 c424170a9f10c0266e76f74b8506d5b597abeffa
SHA512 41d7cc41b099da8a444ae542dbbacbbde21ba2ed225d139cb3482de8b91de6ee38e236ea87c9b422ba111872dc84c958713c13b0cf9ee3ffbda96311e0f3bbce
TLSH
T1C4F052F22AFB2804BE9ED7E1203040A84021BD08C908FD4E142AB69360B33692449D32
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 e655f10feb8711afd0a54c72ffc505b44291a85c106f781b83d982dc1136fb68
MD5 69e636f3bdc13fc080a63c5b06ab3f93
SHA1 b140355b12f9a04c892a48b7bf479cb904ea466a
SHA512 93f289ceb80858751a11af666e4bcb352f1505a11fbbe026d6f4fe492c7c27ac31777953da820200858b901993bb82244567c58b5b6e682b94b3c5e64807831d
TLSH
T18CF022B32FFB2808FDDED7E5203105B800117948C524FD4F1426B69B91B33682499D66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 624B
SHA256 fde91368b193630e6eca00caf1f87350e8e00dda7871e693669ac704660b9036
MD5 90ccdb03478acf9b3a70f4e9b2987bc5
SHA1 b444a67fa454925d8689d75def45f8a77a7b187e
SHA512 a69829f322f0df1975b12281f72e1cdabf0294efbd6d7599a366ddf23ff48dd32ee6208c98744f05a0b882f001612bfd2a9802c52dda62f6dd40422f455a5485
TLSH
T134F022B32FFB2808FE9ED7E5203105A800207D48C514FD4F142BB69B91B33692459D76
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 2e17546236206f0cf103b583ad929e9cc8e8be811bfb9109c1d900294c95bb01
MD5 61cc2d603c36b47b30ede1912dbb2fc6
SHA1 725b80d8537812ed86d8ea325f1ea678bc9d0266
SHA512 e84260ffdfd4959cd5d06bfb668664c7a002f23ef91dd6a402d6c1ae83f1e5a5dfd8647ddf90ffdacb6e2d51ea811495a7549addb5ddbc53fe84ea80511e98af
TLSH
T188A002168979D011CD3007745065518077B04CD92116138D89ADF0A99F9717152E2A05
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b30a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b30a2.TMP
Size 48B
SHA256 9f8c476e2a22db9f1825f8b9ddac77716bf02dbc596d75274b68cb7e18147f94
MD5 b451a6e86eff52c9f7d92fad2ca76312
SHA1 e939bb682560be09e5e61df13768ac440f402d35
SHA512 30b9d44b2454535a46b6e77696cd2816f46952fed9c6a14dea072c6c15a0f066a9f64f98aa05bf2766893cc8d5c3c41aa7a0c04eb1edbe580e1e6567198fc94f
MD5 SHA1 SHA512

Submit Download

2ab00b9cceccbf26_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\2ab00b9cceccbf26_0
Size 63KB
SHA256 206a5943aabb074e919c593322aa052a8988a9c678db11b3e782b9e1f87028fa
MD5 a8810559e34d134c949f27495aefd72d
SHA1 f9123e5a80fe98e27b2bcce4451e345211b2e3b5
SHA512 a024d6b7c33bc9a5578710b99b8d0a33c250c09e33c81184123ae4253fd92f623578717c652bf1c6b7eb3de1d123d0f27cceab7200a464e944a66b3f88c1dff9
SSDEEP 1536:TSu5XhviJCQOyxxfS8fZ6YXkkN2oCiyOIIV353i4Rm9F:V5hYOluUY0kCiyOL
TLSH
T135535BD9737174B3837BA0F1606F120B713AE5A7B004C4A4B198EDE15E54B9A427BFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 db34d6065fc4fb45af2045504f5bc255ce1b80feecd0ca14ab8b7439d7aaee01
MD5 ae41a3f3dfc750275ea6a549678dcf43
SHA1 e88df4575253d262640e5ac4353ad53d5038b179
SHA512 0237551308398deaf066b91de36ce70c0c69ee4213dc06494efe5b93f5385fa1defc0d7a83a21f362f0bfcbd161b6f0e0f0b8ee619a4773a932bd58a6e96e3fb
TLSH
T12DA002941B55041AD4018EB12CC143813364CC114209539F50D501D4ACA25D14E45124
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

0e9bd757-ed5a-4dfe-a6b7-0c87833c641b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0e9bd757-ed5a-4dfe-a6b7-0c87833c641b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 019f969a93b408bbc655002333aa87963bc81a7ab4a53bbe1594f62d1c462146
MD5 4c14682acff06e7551bc28f24f429914
SHA1 4d142f17ff2a76a730fdab86629fa47c686ba9fe
SHA512 83e61207abdb3deca0fe84d2ea3f68ff63ef1fd7ef25e91aba93c23fdcf52f1bf5d5c0c4504e9c5cb0c7549b96fea9c4b362680e032197f1622212f0f40ec13a
SSDEEP 768:A+3H/8fc7fZrKip5XSwQs88uBkiT2Q4YGH3l:A+3fbtrvILNBd4YU3l
TLSH
T1D5F2C035EC9498B3ECF693827A4637066FF0A147D4C80A8485DE771E028B76E674786B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 c449e1200274372886bb338e5cfd2cf6e3fdf9ba23d682f706f30368a0f7667a
MD5 d51f3ee213962667755e1d1b3943e0de
SHA1 9fc6e77899d2213c5d4e4f0ebc0eb293e7498c99
SHA512 ef7f41338bbe270073d7b52fde370bec41b4722ca6ceabf0e2bb239c9a0d8b0b8b2939e5a3cd8cba4279e2513262a87e8165177f1afe2faff6452062a35d1658
SSDEEP 768:4+3k/dfc7fZrKPp5XSwQs88uBkiT2Q4YGH3l:4+3m6trEILNBd4YU3l
TLSH
T14EF2CF35EC9458B3ECF693837A4637066FF4A147D4C80A8885DE731E028B76E674786B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 298a70f9dbad2f8adc15bb5794189dec68bd17ba6eea4d2bd04e383d746e9ec3
MD5 a462c8340729becfc76e6f093439c34e
SHA1 f1063f0b5753fb13426a16d685701c09b0051585
SHA512 66daf75bbc36597ab4f81e6e1ecf34b787af818efa57205b9e9f0d101d0dbd1365f215d41f65aa4cce3a098b368b037aafd8b4793dd1fc44c2f0885f48ce685b
SSDEEP 768:4FQ33Rwg2/dfc7fZrKxVp5XSwQs88uBkiT2Q4YGH3l:b33E6tr0bILNBd4YU3l
TLSH
T13BF2BF36ECC484B7ECF697C2BA4A37066FF05147C4C80A94C6DD661E019B7AD2347C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e92e22564e540c1e91c4d8d0c17abba1bc9d43ed8d811463c24c4c3dd5fe2f8a
MD5 5f6ae3fa8fd2b40aef606caa2d46f056
SHA1 8cc2ed0272c24eda1f70dd7f97bb1a2a34516c4d
SHA512 29a1bc417e0c81920d04f331099037472f1031ead030abfa7ce022cc7aeef82ac0ac90d461867b2bc16b94e6def4bf0004099dfea491dbd5851716f1cd2be7f0
SSDEEP 768:R/UxvxjgC+W3gMac7fZrKZp5XSwQs88uBkiTC5/P84g:kZj3+W3gatrOILNB4Hg
TLSH
T1D403C039EC946873ACF39385365A275BAFF05053C4C41B9849EE7A1E029735DA307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7737384bc3ccdfa451a15e5fcf3d79791dbe9edf8c1c9613bf3385b6f3ee12ff
MD5 080069b7987a61343664c9f88cc36c79
SHA1 565dc70b8f6019cf3918e0840b2296293e5e5ed3
SHA512 ead15220086bdbed4dd1cca5d44bf90edb7a7656d76c58cd6f7b41d6653a6914b27fd7d6be5af8d03f39afd12e8e8f54a148caaf6900591feaa34ab82db2c4bc
TLSH
T1B0E00453E30401BAD4AC033208A3A3242BE3802116F2578B5D1616586992B842F34FA8
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 86008573835175454a2a06c6fc84a10f2012a97d7dfb54ef34880e9768ade130
MD5 488abde31f74dae9fbd34871c6d746e4
SHA1 9c7b4467c83edad661a6b2789b223f3b66913c96
SHA512 8f21e7f2f5a6db0468568fbc59decc47a3bee631186e53990aadd50227be33892f4e5c3f9dc9c48bc4606513d05a6abbc33f2f25d2a420d35e5bbee1ba7343f7
TLSH
T142E04803E30000FAC86C033108A367202FE3802006F247874E2602183C637843F30F94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1b652047449f833d6cff5fdc7fc596e84c585ba7750890e22abce708ceb862b7
MD5 a41192eb4af746ba2e6ee5b327da047b
SHA1 eb549872de66958e27edb59b858f80669ed6a706
SHA512 871b5c64496abe132bb4d043cfd9d92caec13158e959d64ac67354c606b24d37f512c0db07517a44560dd02b4cc2cfb577c5a4721152742b37b53cafcd2c6bcc
TLSH
T18FE00217E30101FFC46C433108936B212BF3802006E24B578E26056D2D527446F30E94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0005dcfa1cafd69d417abf160c84c86e9e18f090cfc24b0a4263a8f3c189ceae
MD5 2363734e3f6e8bece534c9cdd1f59c17
SHA1 3dbf7150d1572a737561a6b5a68c32a5f324cd72
SHA512 9b9983416fb3b8573644c3ec572d0b860f4ece31386434c9c2c84e5bbdd5fad1750ad8494daefc58bc7fa32347bd895a1dbdcaa01f6a840a3faea11eac6a551d
TLSH
T1E0E00217E30101FFD45C433108936B212BE3803006E25B578F26056D3D977846F30F94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 91b49360987d2f0741f459b87950a4515f26ea76924afd1fdef74bed2b5c791b
MD5 2f6b0c85b3f21f8dd54e4b4143ff91b1
SHA1 187a79bd086ebd96ff9c6d3157dfe083772dcb1c
SHA512 b2246b88b5db20a4b5a95a73fc40556b3c3e0e62ecc5290a66230a936e857d8e4ccda7d5e1a4ee409d001e16a176ca34fafbb9ebb942cf750f8f683ed7806284
TLSH
T1DAE00943D30001FED46C033208A367342BE3C02116F2138B5D2612687D937442F34FA8
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d183333150c179a7b68409d7ce40752225c85fd95108bcfd0653cd44b907c15a
MD5 ef09f7e5e74da70ec7629aa91355e67b
SHA1 7f00bb7869600abc749079e91f3ed66ca6d73167
SHA512 a580d5c939e40479987e5cb39bf203256e5cfc65c6ccbfc4f31049f0fce0a434b9ce41808c94c7d47b0f035d0125293f600eb33a5e0b8d903c14e844d6facfdf
TLSH
T18CE04807E30101FBC46C033108A367223BF3C03006F287978E2602293D927842F30F94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 105ecd46e9b7b9d023a0ec84417b5ca85af193d00a5ad16124b82e524321165e
MD5 479bf0c0669a6567d2495bf558c621aa
SHA1 981bd59a3e9040525b56d60e6f92543297d2e282
SHA512 37db334c4bdab7a7cebea28e8a33aab4d69c5854092131f207beace2d2e2ca6c709f6d06c7f115212590498df94ea3901a715a55b085faf2197185ceb7cad291
TLSH
T152E0020193000176D05C0332046763141BE1C01002F21387542512545C937441E30F54
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 82fc32d0e4ebc65612ac62ea533d0e9e7c1981af2640e932d44ba454d35ea8c1
MD5 9310a194beeaaca6592e69045693f433
SHA1 ae5749ed6f5e9f1f9f94d6e7e22184d6d71d7966
SHA512 5d929094d00f21797137f3c5d706e5801867bf7dd0df99c441a25dc3c974560c7b4458959663571e96024e64c905f3dff326528e31103d8d623a2749611eaf98
TLSH
T126E00853E30441BAD46C033108A367252AE3803116F257475D1616587D52B846F35F94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 eae50c9c3f6639ed22d000fe824b9fc4f8c095f22dc967f62c2441f49eb4bed7
MD5 b22777e3e618c405c8c878364b9b0688
SHA1 347df6afce7f148bb1b8e8f3bb0c4bca3b07cbf8
SHA512 55466aebfb92cf1682379f6276d8fd8a3d874bd622f55b60559b2ba2e9ddeb10d58f5da01195766ea4f8db73b7b5984c02844faff475d1c2c9eac61fb78b7237
TLSH
T128E00201E300017ED07C0332086363341BD1C01001F11387541512547D837441F30FD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a6f1aab6cc169b65fecfd2cf68d0afc569efa3e8b9d325e0dbfad91bf2a87f7e
MD5 07038cd25f8290239d593e8e758c6062
SHA1 1dd2abfc58e9ba40091b0c36ae91ce7620a281f6
SHA512 05777003ba9cab759b13bdcadb0f7aa2f636675c52cea642e6cacc6b01009f9c2f1a9534d57a393835ab1acee12864a8c21d400d746e56b9510670f2fe12b882
TLSH
T1F4E0480BE30101FBC46C433108A3A7222BF3C0300AF287978E27022D3D827841F30E94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5b0377.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b0377.TMP
Size 392B
SHA256 c89397f877b655fe60197303f4265e46fe79e327b60fbdf4215fcec20e8d5c61
MD5 df5afb1414b9461b43c72759430c5002
SHA1 d190a7edb3e5beefde68aab3963b5813c381efef
SHA512 cadb623f62ce659f6f587434269778612a41eee7c83c34a1ff0937dbea6b7ead22e4f46a4700cd43a81d086b93edd53b1a60d010de397a9cac07e061ae709cd4
MD5 SHA1 SHA512

Submit Download

558e1319-8a1b-4d29-9b34-833b2c697c61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\558e1319-8a1b-4d29-9b34-833b2c697c61.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 8e85325b0ec44fb413d41247e4914fc94f0cf2c119bef8ccc99a98805425c9a4
MD5 4260649896f58893d01d6693d986c107
SHA1 7dbb42904c597046e58ef3d32928890f316a7a3f
SHA512 6265f2e7a61099aeaa5dfc036bd0072a5c40b61cc24d1c048512755e11acf7867541d46d7d27d869e320ce0b5ef1228bd96ccc81ce46df0e29eb8a929f922d3d
SSDEEP 96:wmwJFmuvmxmwJr+uS0yzwJ7cEw0cGdwJruUy8wJnIuT:pwjmEmkwN+mqwOTYw5bwBIe
TLSH
T1F822D0005FE61A42F3F66E735AB62301BB7FBD099A188E0F458541094C32B14DA6DFBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 9dbdf62c83965756f4c68400ca1bd5576402735674472b384bf5e76e64aa142a
MD5 cf3082dec84840ddb5cd029f768e52d9
SHA1 8bc9cbfc80afbe858a51e293d01d5e04f2fe1a75
SHA512 ba347fbe8a3406a8c99ff028574ab078a5ef994bb1b54b8b2006ffc3ee1d524d47139d95bd804369c757bdcd2c0b1cbe7bb35abccd51e71fbbc3a1e499474200
SSDEEP 96:P7x2J7cEw0cWmwJOSYuLmwJVuhdwJruUx8wJnIuT:Tx2OTbwISYBwfAw5kwBIe
TLSH
T1FA22DE005FE51A42F3F76E736A727701BB7BB9198A188E0F448541058C32B149A69FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 95ce465b5031a91450879a39e885a4a537effb4b51cbd39bd59344c0e5fc54b0
MD5 bf97b1265d424d253445a7f288c021f9
SHA1 cf8971edb290feaa3e18bbe332641c1330f526fe
SHA512 3b46e52090c0b79fac8c926b997f28e4c29ddea559c5eab1f3d73ee5729a32dae49b8dbdb87c42e349d870370bc2bf1dbbbf5a2f5665a1a5dc2bab79e079e2d4
SSDEEP 96:wmwJr+uS0yzwJ7cEw0cRmwJOSYuHdwJruUy8wJnIuT:pwN+mqwOTEwISYqw5bwBIe
TLSH
T1E422CE005BE65A42F3F76E735AB22301BB7FB9198A188E4F458541058C32B14DA6DFBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download