02e48b385186b961ec1eb873b3ac79cb15adf2816a2b58ce9f59e72988f03faa

Analysis

user interaction
yes
max time kernel
151s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 23:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

Reason

Machine shutdown

General

Target
New Text Document жх(2).txt
Size 18B
Sample261002-3c2rjaxt2j
SHA256 02e48b385186b961ec1eb873b3ac79cb15adf2816a2b58ce9f59e72988f03faa
MD5 bb022f232404ea6ec27a410defb212d8
SHA1 39b60f319674f20ea26325f350c9fc751fbaf2e4
SHA512 b25f392131a1ac6440fb9c8f60d03682e882fe324bec6d25471fbda2348daf5404db0028f1688efb3c66f3d5db6319e93cd4df38a3d3c1d9e1314c9c8b62aef9
MD5 SHA1 SHA512

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
152	whatismyipaddress.com
153	whatismyipaddress.com
155	whatismyipaddress.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2280	msedge.exe
2656	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{DE448403-1476-4BE5-9307-53896669D1AB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{CEA8CA46-C076-4F97-A561-EE908B18B9CB}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs

pid	Process
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
5816	msedge.exe
6728	msedge.exe
6728	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5816	msedge.exe
5816	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2164	LogonUI.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5816 wrote to memory of 4684	5816	msedge.exe	92
PID 5816 wrote to memory of 2280	5816	msedge.exe	93
PID 5816 wrote to memory of 5548	5816	msedge.exe	94
PID 5816 wrote to memory of 5548	5816	msedge.exe	94
PID 5816 wrote to memory of 5548	5816	msedge.exe	94
PID 5816 wrote to memory of 3324	5816	msedge.exe	95
PID 5816 wrote to memory of 3324	5816	msedge.exe	95
PID 5816 wrote to memory of 2628	5816	msedge.exe	97
PID 5816 wrote to memory of 5904	5816	msedge.exe	98
PID 5816 wrote to memory of 2628	5816	msedge.exe	97
PID 5816 wrote to memory of 2628	5816	msedge.exe	97
PID 5816 wrote to memory of 5904	5816	msedge.exe	98
PID 5816 wrote to memory of 5904	5816	msedge.exe	98
PID 5816 wrote to memory of 3212	5816	msedge.exe	99
PID 5816 wrote to memory of 3212	5816	msedge.exe	99
PID 5816 wrote to memory of 1828	5816	msedge.exe	100
PID 5816 wrote to memory of 3212	5816	msedge.exe	99
PID 5816 wrote to memory of 1828	5816	msedge.exe	100
PID 5816 wrote to memory of 1828	5816	msedge.exe	100
PID 5816 wrote to memory of 5036	5816	msedge.exe	101
PID 5816 wrote to memory of 5036	5816	msedge.exe	101
PID 5816 wrote to memory of 3416	5816	msedge.exe	103
PID 5816 wrote to memory of 3416	5816	msedge.exe	103
PID 5816 wrote to memory of 4740	5816	msedge.exe	104
PID 5816 wrote to memory of 4740	5816	msedge.exe	104
PID 5816 wrote to memory of 1840	5816	msedge.exe	105
PID 5816 wrote to memory of 1840	5816	msedge.exe	105
PID 5816 wrote to memory of 1840	5816	msedge.exe	105
PID 5816 wrote to memory of 3188	5816	msedge.exe	107
PID 5816 wrote to memory of 1772	5816	msedge.exe	108
PID 5816 wrote to memory of 1772	5816	msedge.exe	108
PID 5816 wrote to memory of 1772	5816	msedge.exe	108
PID 5816 wrote to memory of 4572	5816	msedge.exe	109
PID 5816 wrote to memory of 4572	5816	msedge.exe	109
PID 5816 wrote to memory of 4572	5816	msedge.exe	109
PID 5816 wrote to memory of 3872	5816	msedge.exe	110
PID 5816 wrote to memory of 3872	5816	msedge.exe	110
PID 5816 wrote to memory of 3872	5816	msedge.exe	110
PID 5816 wrote to memory of 4216	5816	msedge.exe	113
PID 5816 wrote to memory of 4216	5816	msedge.exe	113
PID 5816 wrote to memory of 4108	5816	msedge.exe	114
PID 5816 wrote to memory of 4108	5816	msedge.exe	114
PID 5816 wrote to memory of 5828	5816	msedge.exe	116
PID 5816 wrote to memory of 5828	5816	msedge.exe	116
PID 5816 wrote to memory of 5828	5816	msedge.exe	116
PID 5816 wrote to memory of 2008	5816	msedge.exe	117
PID 5816 wrote to memory of 2008	5816	msedge.exe	117
PID 5816 wrote to memory of 2008	5816	msedge.exe	117
PID 5816 wrote to memory of 1244	5816	msedge.exe	118
PID 5816 wrote to memory of 1244	5816	msedge.exe	118
PID 5816 wrote to memory of 1244	5816	msedge.exe	118
PID 5816 wrote to memory of 5756	5816	msedge.exe	119
PID 5816 wrote to memory of 5756	5816	msedge.exe	119
PID 5816 wrote to memory of 5756	5816	msedge.exe	119
PID 5816 wrote to memory of 6132	5816	msedge.exe	120
PID 5816 wrote to memory of 6132	5816	msedge.exe	120
PID 5816 wrote to memory of 6132	5816	msedge.exe	120
PID 5816 wrote to memory of 1320	5816	msedge.exe	121
PID 5816 wrote to memory of 1320	5816	msedge.exe	121
PID 5816 wrote to memory of 1320	5816	msedge.exe	121
PID 5816 wrote to memory of 5484	5816	msedge.exe	122
PID 5816 wrote to memory of 5484	5816	msedge.exe	122
PID 5816 wrote to memory of 5484	5816	msedge.exe	122
PID 5816 wrote to memory of 5612	5816	msedge.exe	124

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\New Text Document жх(2).txt"
1⤵
PID:4760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ff899ddc188,0x7ff899ddc194,0x7ff899ddc1a0
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2052,i,7126036520628280157,6240522237295467367,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1928,i,6958905824532824648,1107197104783610093,262144 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2732,i,16338671470684733152,1492832709323590597,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:13
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,12063933372535725185,4026686182063985247,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,2956028835146255791,1745206773568283615,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4392,i,17814124951523089044,14474119516180830495,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:9
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4380,i,17969737115165107008,17161753478587390530,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,1366568286874151579,7680248386358067466,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,11571417816808709175,7672756421319450690,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,9507726840905304188,5870876140176546939,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5780,i,14343376656064948550,6142549858850301644,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,17290054964471122451,1335514273056369280,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:14
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,17290054964471122451,1335514273056369280,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:14
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6744,i,501350122052808523,3673905643518722750,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6912,i,7366516680387093406,10090328377104870067,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7072,i,8774303081867067372,12217697838337088856,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7404,i,12189426306799271517,17696407496542185774,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7412 /prefetch:14
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7392,i,10302735927810958597,10110236742850119778,524288 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:14
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5840,i,17231923434402953491,2939594043578659187,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7708 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7348,i,5687095918123357406,11407970033200594532,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5892,i,5039271224723588188,8993946140683983758,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7928,i,4425256886441938217,11228789628780827409,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7492,i,11552314892644433765,8074134753248088533,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8088,i,4748912738103444249,17413903274121373746,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=8072,i,13536849428868860555,1649763248474534403,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8100 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8168,i,3738467270909748517,8644821291954297370,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8360 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8212,i,3421087139952497125,3392226258231701419,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8436 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8224,i,3552383683980866319,1020546641071203058,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8432 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8240,i,13894322050336339080,4237321402583237042,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8428 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8252,i,9847266880794332745,3923874114310803828,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8416 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8304,i,10115155885042567051,15198440779421682631,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8532 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8316,i,10498371656885019624,13862063305810004554,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8480 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8276,i,12739460912864093442,3596275485580081027,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8548 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8260,i,83905653003215946,17484862434146504482,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8552 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8284,i,13362229777672399276,14786066881938428400,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5876,i,14603951907855398739,13756598447905882584,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8284 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8620,i,9913435471310561762,17705468812553980619,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8832,i,15449225596646023461,15520590895071621452,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8076 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8852,i,13464100620151876069,247410774628631347,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8916,i,10803989356059983364,7014576875228538685,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8932,i,136097290926478892,18159494552823556012,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8440 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8964,i,10225903979871367639,14233547318926162383,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8996,i,6815197101442291533,13556496671168224949,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9028,i,18295431216713695205,6359106735680194494,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8972,i,5051698363900107358,3755054317344955710,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9012,i,16502659704113970057,13585881420429125602,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8984,i,17262261600069505486,16012219625259379754,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=9044,i,7704280759901019102,12610393804088749203,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9056,i,6768926314234033929,11800056118248815093,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9108,i,226521059981127180,17883064861135306958,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9092,i,79864337641770899,13517718014253744029,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9120,i,17649218666993164313,4793101653132859743,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9296,i,2602727800860078078,16976699388405990990,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9280,i,926772256505946979,2262102006387523751,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9076,i,3143602329786793028,16933765230305950916,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9416,i,4075153971878192257,6692838557139279937,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8092 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9484,i,3049929803807471756,10927777116281410454,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=8320 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=7956,i,11290697271053301387,17994202832874651391,2097152 --field-trial-handle=2356,i,1603860489319009678,17737538625563309155,262144 --variations-seed-version --mojo-platform-channel-handle=7648 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  PID:6728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff899ddc188,0x7ff899ddc194,0x7ff899ddc1a0
    3⤵
    PID:6772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1904,i,8432353036961908675,17020648191882842789,262144 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:2
    3⤵
    PID:6268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2128,i,8265275255559403719,9369851950590356198,524288 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,891566904383684729,10057050809767311484,524288 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:13
    3⤵
    PID:3476
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,6130227209894859690,4990732751294304173,524288 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:14
    3⤵
    PID:4372
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,6130227209894859690,4990732751294304173,524288 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:14
    3⤵
    PID:6616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4892,i,6743424354666848078,7883934237181566233,2097152 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
    3⤵
    PID:3036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,4507195636627385675,6414738626087715005,524288 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:14
    3⤵
    PID:1632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,11923372825623630014,10101060470818112799,524288 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:14
    3⤵
    PID:3096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5584,i,7152298843747851509,8353021851076467029,2097152 --field-trial-handle=2432,i,15064077541350239316,5841916080239626680,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:1
    3⤵
    PID:6784

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4948

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4188

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:7044

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa39d5855 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:2164

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k CameraMonitor
1⤵
PID:1944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1ac487ed-0fe4-4b22-9d54-632d0f4cc62e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ac487ed-0fe4-4b22-9d54-632d0f4cc62e.tmp
Size 39KB
SHA256 c45152927ef1fea141c95d8f6c4cacdc07efb31d228c4981bac740f29b3b9e3c
MD5 2fc83d094b63c146e52550db60550b9b
SHA1 1e086ba91248231cdb62670fc096da121b63faa8
SHA512 e9c389c4f4b07581ee4599699ce377f60a112cabcb3c3e0f041db2b2063c5d839c7ff9ee7e8df390097c3134601c370f07551960f367c7b7523315702f805b28
SSDEEP 768:f/UxvxjgC+CZ3ZtIKK3ONtaz1h3Yogkl5akl8pbHW0AWDNoSG:yZj3+I3Kz1h3Yog05akl4bHW0AIoSG
TLSH
T12903BE35ACA5AE7349EAE245B21A6393EFF4987399C44D8884DD8F0E05873AD070BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51dee258-b2fe-4165-a522-65c963629f5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51dee258-b2fe-4165-a522-65c963629f5f.tmp
Size 39KB
SHA256 17d7b94b8744082c9f3edf59958d18b7773485e904684e1a98549d3c35dca523
MD5 ebedfe856bc84071b8dfd9e57c407f7b
SHA1 4873316aabff6428261eecc5bb124481cf0afb64
SHA512 0f154ce6e156a8fb9802a1e1075f8eaf4a237a94562e9e51777ec46a5539715142b01a19830ed2b132e7a9b762052c988012f6e039c3ad68648a12bc58e8b787
SSDEEP 768:OA3ZMIKK3ONtaM1h3Yogkl5akl8pbHW0AWDlTRl9aH3DrgvP4Nf6:OA3dM1h3Yog05akl4bHW0AOt6Hzrgwf6
TLSH
T120038C7C9C60AA7F49AEB305610E62166EE8823BD6F45989C3CD8B0DC1775ADF347C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8442d4a9-0703-4844-80b1-07ee54a79a72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8442d4a9-0703-4844-80b1-07ee54a79a72.tmp
Size 392B
SHA256 867110327f25e5b178c51272466bc82a7152e5af6afee4b57dd61b92ed270b4c
MD5 856945dda60f3f0883a34f0d9a165ee6
SHA1 8bf81886a3e3d6101804f67e69c0a0758c67d6fd
SHA512 181a87758b7d7518a1c7d9baa8361797693b9d3ec4ffbc95e810c3e36da9384b2b472059788d40dce0c160e9e21582e33766aac19159eb890bd1943de41b96ef
TLSH
T152E00202D300164FC035073000C31B301BD2C42502760327681016A43D137013E147C4
MD5 SHA1 SHA512 TLSH

Submit Download

98a03b03-4399-4373-86ac-8a0fbb4f2d7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\98a03b03-4399-4373-86ac-8a0fbb4f2d7f.tmp
Size 37KB
SHA256 da3e78f45d3b36771d5fd717974b19900f75221cd47e389f5df86209ed18b631
MD5 95f616d9528679d680f7da528fb4e552
SHA1 42cb5dc3926ef33a307946b85d4e7a9647dd2b36
SHA512 2fcf488451bfa051d23cf35497c5e561acdbe2f1e05f5f6f3eb7df504e3adb4b2b23877ee983aaddc07b265f2ce23afb53c40e9a60eb37c8afa8b3fe67f0b505
SSDEEP 768:B/UxvxjgC+CZ3zFK3ONtaN1h3Yogkl5akl8pbHW0AWT9SHvP0Vv:UZj3+I3uN1h3Yog05akl4bHW0AESCv
TLSH
T12A03CF39EC65AE738DE6A244761AA317FFF494635AC4569445DCAF0E028B3BC030BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08126c54bd139460b048bed70881ec2eed246a5165d23d58802f8221a04e5af7
MD5 6792f56a8b16de71cdff46ee6b1cb134
SHA1 2b344e6bd240f256e8ced955a740db088b329901
SHA512 5d23317e53f46eddbd06ca669cb69d8bc0c7843ef8345fa5123da2678e3f073a1eef30b8cfd5c04c904daf3a7d089ea52b412f4df3b917047a639782da4db03b
TLSH
T1ECD0C00CF9AC8378D9082037923501163B88D100FE03500180D122A504B3310004C0B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 74115655b7cef8beeb6319503739a945a81e4bc723b21ca5310c7fc4651d5017
MD5 cef3877f267000ea83f889f1f4250a74
SHA1 450da6c1896141b40179049370d69450d1a754ad
SHA512 532981e5d1fe6e3c13c69c27a36822ca6ed714463802065264681aad7834702a754d0d0fc7b75e4d8f97dbc248eacb9699e2590d0f8f501997df4453a63d9560
TLSH
T14AD0804DF9AC977CD9592437963541663B89D511FE53501185D156A544B3311015C1E0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 03d00329319490e3d2ec6b61f9e8a12665158b83eb73666756d1d6792b979c87
MD5 f9bec72d29f1e0f2dd6e4006cc5b0d46
SHA1 c44504c4b51c6c746aacf532c10c5ebff657e836
SHA512 3ef3eafd3550a107bcc03bb01b841e062973d0f912dd8a2203b224f867da719d795f9e4eab5be22f3fb2b6bc67f0e278ae10878c59dcdc1c08148e8c5decdb62
TLSH
T1A4D080157DBCA7F4E12D203E5225010576CCE553FE435105D89165594CF33924095DF5
MD5 SHA1 SHA512 TLSH

Submit Download

20be33c8-7bf2-470a-9239-807864a4f636.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\20be33c8-7bf2-470a-9239-807864a4f636.tmp
Size 29KB
SHA256 983e90f44f0d04536efac01b5a5c4553d7f60de85a2fd0210ebf2c01285a7ee7
MD5 6709f4e15ab858a112c0739b0c035419
SHA1 9d475cf86b662ba020fbaa7bf3840a5f79849b43
SHA512 146d31c9946d4e9aa78411f2dc9216ac84c970082ef51e465bfc850b2d0e032fa306ec706bed9ed1effb7882819dede004335d85efe163aa5893da4ef6a5643c
SSDEEP 768:suymz+/f7Yw6KOUB/5QZobjMB3mvm6E7hec/oMs:FymzmYwnvQZo/bE7hx/oJ
TLSH
T129D22293A4302EFB0ADA5537F624FB3DD695062AD8D44ECBAAECC82D10D69FD6401CC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34a27c26-e5d3-4cd2-8730-1b9efe3f7906.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34a27c26-e5d3-4cd2-8730-1b9efe3f7906.tmp
Size 414B
SHA256 aeae3aadb13276c022d22230df0c36840d92250a7006f0ade0f66ab2a623f185
MD5 ddfd3be6dbb9b275e35f523ad38fcea0
SHA1 0972058e8b444aecec590b9c82d1c9506f63b032
SHA512 36e2070ee12ef6dcdb7d3404a2ddc4b5f026e0eb9613d9e7dd35d0c193e1cd28f23b0b522ee6cd7fccb5c24f089016476060132a48dc760ded0db3bb574e120e
TLSH
T16BE022A9C821EC371CFC0F5E61940B4AEF50231B3B81899F3A3CD5198FB0A7A458AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

4a15e6e4-e2fb-4476-8d5c-cf3fe05af2f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a15e6e4-e2fb-4476-8d5c-cf3fe05af2f8.tmp
Size 26KB
SHA256 6374f0ec11bf35f8ad4b2e74405399c437a45e2ffdf20687cb6a2dea5bcc7d2d
MD5 078054d4c70952d7241c99503532331c
SHA1 4d7bc0f2393c7a73a92987870688d1cff9823698
SHA512 61642169de83cd95f3c27ca2941640cce87d481477a5a4cdf3e53ef0f7860ee96b592996f728c75391579a654654c1284f8cb38846d5007abde9050adae0986c
SSDEEP 768:susmz+/fc6Kt/5oZobfMB3mmiE734EoMs:FsmzxroZorRE7oEoJ
TLSH
T1DEC22293A5342AFB09CE5537F624FB3ED691062AD8D44ECBAAECC82D10D69FD6401CC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58f09fd6-2e4b-482d-ade1-f0e63b6f4a42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\58f09fd6-2e4b-482d-ade1-f0e63b6f4a42.tmp
Size 28KB
SHA256 26568fec384589f150b9166e5d01deb5a39bf6d780bfed4315367048da23df35
MD5 ff13784da15d9df5a431b1cda5326a3d
SHA1 05f3deca3911449b2ed4459aaf68f8d3faeb049e
SHA512 eb3e677808f4013c43e450366a17c5c9a33ce605d1b611fbeaa42e79bbf70c6fd0be85d319b40ca1490c003e288ba9298670738ecd72161feff85c6f8bee1fa7
SSDEEP 768:suymz+/f2Yg6K//5QZobjMB3mvm6E7hecZoMs:FymzTYgJQZo/bE7hxZoJ
TLSH
T108D22193A4302EFA0ADE5537F624FB3DD691062AD8D44ECBAAECC82D10D69FD6501CC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fc54f70-f25e-4234-9309-4ace9619ecba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5fc54f70-f25e-4234-9309-4ace9619ecba.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

99f1185c-7c88-40d0-b4b4-328cff5d091c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\99f1185c-7c88-40d0-b4b4-328cff5d091c.tmp
Size 27KB
SHA256 dd33a865437b7ca986da8321ec7a1e0e2edc298c263d446bcddffa2e528db305
MD5 cbfa7e1edcabaee52c21ee225781bcfb
SHA1 eab6a8139b5a05f426552c69bb3baa9c6748f5f1
SHA512 c0b6601a34ed63be953918e91e437ce3c88af9d884e30d74791926bbeca0418f4e285cbacb3fac4bb59c4bca8de161b6e7925fe279fcab3fac80dc9353adb463
SSDEEP 768:qF+zoU7pLuLb9oWgU6f8S8F1+UoAYDCx9Tuqh0VfUC9xbog/OVTIGUVro0U:qF+zoYEb9oWgU6f8Su1jaIxUu5
TLSH
T172C2D97B740CCB7F4F900ADD98197E9B6DA802CB9698CD4047FE945C02C6BEE62164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 70KB
SHA256 1bd0f3c1b040eb4eb5d6ce267d3e0e56bc06165e6eb1fe3fd8937b1143d55237
MD5 658ba1471c8c28060a84255aa2cb5cd7
SHA1 247ed49c4141f0b74eec0657a6fe5c8d10cb532c
SHA512 112555ee24085e077bedb6ad45e216c75444e0c932547022ca0b23f0628ae046cafb0f7ee32cecf2757ee26b2cd63be2399d346323b7dc904e384a273b3bd6cd
SSDEEP 1536:bwmM+nDK9y4wm1xA4AtKfoMk79twxNvuc/HUxEzrz6E82B:cEDKArm1ymoMxBRCEzDB
TLSH
T1236312C13AAFE6AAD17646B5D4DBE578035B05327BFC4497A603A3D30B906F173C2826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 418KB
SHA256 37f4e199adeca05d1f2588d8c1c4aecc44093b2c54aa3a59e6626b8595686f41
MD5 d0967b1df0f195db8df4180aec0971db
SHA1 d9ecf75a740efeddfce9643b290239a3b93e51a7
SHA512 a00f29610c788bd96037a955c381f4d6d8a68ea6a1e24dd4aec352484772d7c942b9feead87a92019d8bcc03ea8781a675b71f3f9986533841a4e93795495647
SSDEEP 6144:LcdAxScGh6olV0HTGZGRffNay57vFeYqrg92gv3EgkVz6jvLUZH+k034I4:LcdAWF8HTq4fNp579eBSvpAMi+9T4
TLSH
T1489423B73291C6D4C5FA4322B0BB85D0244485356B68A271DEF603EB6BCBFD46A7E05C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 27KB
SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
MD5 8b2b699d8117447930c6ec35be5ce1bf
SHA1 4755bb0de47453d0c7c9d3554c0817fe43b16faa
SHA512 0ec74a140efea57cfe62e43b184deb3367c941e338a1394a4fc2483ec391e52e9caaf43200c3a970660cdf74a5692a7a083ac79675397fe4cb90b585e3b1964d
SSDEEP 768:tOtXHHGSKIj3A/HUtFb6ofBs0ltoijHHkJtmZx5WOCL:8Br7A/gFb2smijHymn5W
TLSH
T1D8D2D16FBDE86F44943C5960790232E1419E9A70B384AF372175B2B175378AE6783CC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 78KB
SHA256 22d31bc2ae591382f2445d2b5e976928961b2bb70ae28e3207f761e716717099
MD5 a43f114429de90373ce34d6a0a460aff
SHA1 ff6f9fffb85f8151b49b9d96e2061355939f8457
SHA512 5bc98f4266f38ea9e06e76ebe7163d0b781cba7f6bf259379fc42be4948a7a85ad92bfcf2b56aaa0c5ebb5665b30fd377cca8c103790a22b03ef962a32e694a3
SSDEEP 1536:KmSCAdY597erLHb1Ctp8h1jpq+yDbW1Jn2/czcaIyJcHvA33hnf:YCKI9C3HopMJ4aDn2shHJcPAnhnf
TLSH
T1877302630A1B664485BF2EDE1E0702757FD4E217DCF0D2D283A274ED9A22D1CD9C2D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 39KB
SHA256 add471976349e9694d6e1455d9bce825f4ad5559649ce95236a332b0e1833043
MD5 8d1041439d9600016e068688488d11d3
SHA1 8677a6da3b721ebf1156e8f61f24485ec71cf229
SHA512 496c285d5ad9f421e33779bf53753406e6ef0f3fe50f2c8e043025b9f0e13832fcb4fc81120080374a5ba957900134dff3a063e1c9dde2279ef07be28aa13f8d
SSDEEP 768:Gehu2fpxx2jzg4Dl9RNXebh1RNmRPTNNutQ8V4cL70I4dpfGOn+2SKKNs:jhu2fpx0X3XebhNmHNzo70I4rfGOn+29
TLSH
T16B0302413DB1B0F3BEE4ED57C609FE363D9E6C511E9AFE67834B42568444408197C6A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 68KB
SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
MD5 0e776a9829f2513dc6b150e6e74178aa
SHA1 60fcee40a3ce00c80e125cad5c0a55fa02d15f2e
SHA512 39f0ccd6a44b69d59611679d725ad12187393d9628d977f9848796d5855fb145f3bfe2a3998bd2bbf8b5240c33cd6ecd9d49ed09f4d0270d5ae40558cf7acb54
SSDEEP 1536:H51miTVgrQ7JaUf76Z+AGYguWv0KxwhGPkMxOIdzz/SIWT27zQMPvp+elQDQ:ZYMR78X9GjuW8KxwhGPkKB5JWTMzz5+e
TLSH
T1026302329668F371BDE5B98DFECAD32F58485C204207CA11167E3DF3852549954D8C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
Size 44KB
SHA256 34a6a0b4c6521f99ec398ce7663437ea2cbb0d86b4d1322f65ae2b45a53007b2
MD5 f069cb36af3b6c360161ec41ba4e24ba
SHA1 98c3aba0d33b9daeeda530528c6d8a2debcc1067
SHA512 0ea2853fe3ff003193dd3aac8d7e895b91513dbe13e126a540462207ac18c215eb753ed77eded3a948ab5f0adac084270bccce77abf77ff99d5a375a5f607043
SSDEEP 768:DkwV7Apz1QrSXVvr4Qc/8Dc08rHPTynh06oYE7BsMlu1U/zWbw+FaBfTPr1feVrF:DHVsz1Q+Fvr439HPTgx5E7B41U7V+FKU
TLSH
T1F923021F23F52C97C23D1E603BF184E0BD64287CB49163E0A11B50196EB49C7EAB89BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 22KB
SHA256 4815ff0813847858a5c310c159f565fb1f400b133bcb5284b26e0d9a8431beeb
MD5 4f9462fdc64bd5760b2327cdbc43236b
SHA1 fc8dacbe4dfa90c404825305ea5914a5c3365b59
SHA512 099dc0e029a386622987f1a2e2a4039150be7f4c7747586edfb75a42629e11f4d72a99ed69589f2955f94dbe315b8014d577ace3b22f9cee467f7419dbe8f872
SSDEEP 384:ZkoTAbNCw8/zSEAz7RYon6DZPNeyg4VHX87RdMHA2prg02v4NFZN4FrWkiv:ihxE1q6DZPNeV4FMcTF2vYZKVWkG
TLSH
T1E9A2E0C44902A352F06B8C9F967271D1DEE3003502A5BBB7CFDBA69606C519F2397388
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
Size 77KB
SHA256 1ccd8f351a5f8907d04c607077c087ae2427ae6ece55b1acaf2fdb11dfa1c43b
MD5 624dc98c38c556396a20d4f2c3990ce8
SHA1 981f0489105c7d374d59e5589a7568b778c24fc3
SHA512 a4ccfe57df139d01cef6e2c3492bc961d8172d6a6b7ba6cbe59c5d98f69e53b2e109ba63a20d0a85e3b544ee5afff4efc0acb156d97e525176c89b2206b84258
SSDEEP 1536:VGe/4FdoUWJEe/RQfHzrd0CRa0g1G/r6oTDkotfG:VDgFedNifzr7HBzzBM
TLSH
T1457312B51FB98081819E69F3875F455210769022CB4BC394D20D5FA8F1F7DFB928A87A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
Size 24KB
SHA256 1c295c5eb4078e94b5b5211239355f77fb9f88807896ac21f1bb89b38913fe64
MD5 361a1d27fefd402bd8c8e8b35392dfbb
SHA1 8550e36897eca38cf7de163c0ee15bbc6603f9f3
SHA512 ba5c2e28770fa880567d232582e58dd60b0d9f504bfde13c2287b843944f8541dbaf171b5b59ae549e73fe3f92234507f120a409b5ec7483470353eb31028d84
SSDEEP 768:9KPJLKpfBa1Is6qGt+1eHBmE4X/DGr6hHqxNFhai8sOLn:9KRW5MIsZkBmETmHwNbaidOj
TLSH
T171B2E1F4E7D5837AE51669707DA870471D50310719AEA3FE3C5029E2AC64781F533C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
Size 30KB
SHA256 f2b6f270df346361804f65d7625fa838e8166f29bbb00988685ff55ba09a84b4
MD5 4704e0a30089541f9b6eacb3e165ce97
SHA1 c99b32eeed54324655398aec03c77ac07add1874
SHA512 801eca0f5283e1e4b2c93061cb20bfbd35d59fb1d33442c67fa054cfb23781ffd334541e96571c1d89abbdf3e6700c24601a0d8cb6f260cc36ed87361f8c4aa5
SSDEEP 768:dpHln6acI1sl+kMVNqfqgZpMQBOJeHpVIQ8EBWS0TxdRZv8:dpR++kYCjZbceJVIQrXURK
TLSH
T14BE2F11D01B8C7DC69C79483B61AD0E73E8A19277E9007A05DC394BFDEB8819BC9D74A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
Size 55KB
SHA256 ba4fcab88a7630a5effcdaae34d5d95407066c71d73c3f3eda64d4c9db948ff5
MD5 81380c164c6532ab7069bf22dd94af0a
SHA1 9414298dc767c0536f134b6640c152a407a50690
SHA512 e356586784f8d841628253a15cb74e18aa121dbeb82c5b9c7c2fa917957433be7536d64ef78b2a7a57820ec5909699469c71eb14ca6218f64a5c57759408a063
SSDEEP 1536:qOiy94mUg7lW8uQQcNP0rHsfn9jUyZWpA5q:VPlTuQj0zsf9jUD
TLSH
T164430131CA1B172E5B1D9BF2BC1AD57F9A89318B7420A1117440E16D5FE2FAB0713A21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010d
Size 45KB
SHA256 75463ed7a726fb5f832d3c06b5aaf19a02a7916de08268c68b1095747b489f40
MD5 3411632a5cc8b143abb0152428c26d9c
SHA1 53a79f8c4262bc637b8f1233fb17372cc9db9512
SHA512 c55e2c9aa331570289af1c63b1689cb61c43fc45706e963ab28bf282a868e1326fc0b352ea798d14866b21d7e12ed3cc0eabcf6b4d1d2037719807ea531cb42c
SSDEEP 768:Z9mUi/s52wX1GS3k3H1wfgJgPUSU+Th8Fs/Y7tWV1YwM3QFXWGjIo6aX0vyzEZNY:ZQUi/y2s1XQ2AsXY7tWV1C3QFXWGko6M
TLSH
T11623F21A9356E8E81C700FD5A6A222C8DECFFB857D0B1A4996354E1D884A4A73FD0789
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 8KB
SHA256 6432fd929853dae768718d9fd4cb7ced2ee14b0b1038998c363f6df8bed2fbdd
MD5 32398a7abbdee068b111bf3145a0415b
SHA1 360493ec3894edfa785d164bd3278f289e5d8494
SHA512 2d10fa1b1ce05603647af620f3a88cf754af391c0291cdf468d7abe1b665339b6eb2d2f5688fc7f71f6d7ed2654149ad9ad047bcc4dce203fd22f78b6c514e42
SSDEEP 192:bCQ3SPZl4FCB5Nzvzjrxz9jif0fpSo/gZgg:bCQ36/4FCBjz3rxZjySdIyg
TLSH
T15402EB50A1B461A1EB6E367111F4084A727FB51E94830F0F562BC6B7FEF73B1A8B4A44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 9KB
SHA256 41842150a81ef84eee260b50caa10a3760bffd4cad6968cf4574f27f6edfa6a5
MD5 69d665d1a432b15755c0e330363ab8b0
SHA1 ecbfad584fec3ef3de0bb1ad0f52c906a48338a1
SHA512 bec4f48d6cd7e0ddf4a0e554a8ea226b843395f73420865022ba7988650b1c8327dbbe7c9fb879ce19d616dd014e2db414a2d720e5aca8dfb2be2de01cf1f8bd
SSDEEP 192:HqMwP4nj8/34ppxQvqRU7LBwmmfJpvcZ31P:dnQ/34pr0uU7LBwm6JpvE5
TLSH
T12A121D9452B050A9DBAD367522F40D4A717FA84E58834F1F1127CABBFEF73B1A4B0A44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1c5e94539bfbe2ad46e246f021e09858e536cd46d813f298aa06881b5fc34fb8
MD5 8bc89f77f3013c18646ba3e4fe5d4bb9
SHA1 d2f80c5920152ffdc1b5a42b71f72f6192fa0879
SHA512 1f946af333ae8a89c43afc4ee9cff6de9f897ab4dd5748f8d2c4632b1bbd40813d0431289a1195b6420f931140377d9fef4870856df86db42a833ac3880d6b78
TLSH
T1B871A8A082308146E3533A7476F9596631BFBD8CDEC35E1DD267DBBADA3933095C2058
MD5 SHA1 SHA512 TLSH

Submit Download

f1eaa8ee-f5df-4cd9-b9c9-eacceafb7466.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f1eaa8ee-f5df-4cd9-b9c9-eacceafb7466.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 a9b0a76d53c9fe123b158db044e6f20c815f46cb5f83f6e3ae638bad7df339f3
MD5 5cb2faed19a6992762b35b4edbdd36f3
SHA1 900f7e580d65b32e72f17984956dc3657d1902c2
SHA512 10793a95e1040fe7320cbbea79a8a1a11a9758fc1cdc70512ff5b4bc166abbbab6d562915e5db0e4e0fd7451d5918332bc23ce7951fd2be56d80e7bc0b45232c
SSDEEP 96:JBCPgsXk9Ydea/ik8vwiZYwtHE7Kr1sXt:/2Rdea/yZdtpry
TLSH
T1ADB209136E7ABC01DB800EB615A60976DD3EE15CCFBBADA8393810910CF406B153A5FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 d82324aa04004b701a6babf217eec27be2b32b8cfe4b8a72c62281be0c973899
MD5 818ccda84a4d9eb284274223fa4100fd
SHA1 32e9682ce4bb53c6861b8d12252373577b320fda
SHA512 eefd5c001133750a8271eb0d8107ea153a44a30d88ac599361e7e1d21cd080dc1643a203a991ba793a0c402a23d3c2a50689da632a45f503e025c3feabfa62cc
SSDEEP 192:GRSml1H+bF+UI3iWGVoWN3qL/bhOWnFcXVVV63:G0ml1IkUI3ijVoWN3qL/bhOWnFcXA
TLSH
T12A24821F6F257B11CD7C90B668E319A36C6DF02FCB56A5DA78A004B0CDE2626511C8FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\000003.log
Size 18KB
SHA256 a42b3a281091b20815d0d8d5050e51dded46010aa643f65b75eac5aa55bf3a3c
MD5 dac97c36640bbf42ef1210fbce436931
SHA1 1f6c29fcd85184085e0b98a0899400feb590581e
SHA512 c8b58e31da7a720a337cc27f6dec916239456321cbc382dc7a39b382bf2c31ec3e467840bd1ac7eaa1d48da54a7a90d26484e007d438afd5b3daefedd1cd13dd
SSDEEP 384:c9eF/TfdtMtlfKpppzWA9GoVotYxNXiBZX/uhda7ENpT4f/1annoGfi:cAFbfrMtlfe/zWAxx1UZX/uhda7ENpTI
TLSH
T15982E41F72AA9F63D8A94771596A1BC40B373D45BD90C21EF1C1B63ECAB09804D71763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\LOG
Size 365B
SHA256 22b4f1905f8ad0edf3bf025d7d400611f940af49cc3355b75e78c593b6e5dde6
MD5 4217d49350801602548486ab4ecca005
SHA1 aba29f10af71eeb91bd9ae3130ee9c05fcbce3d0
SHA512 3ebe3e822aa9d82e6b0a14acb3594c595a8179960f8b2c4f54bb18c79f1a3a27ce6af2cafb196ace729d317fc06f474343297bb500b1e63b5541a9f0f913433d
TLSH
T1AEE0617899CDC21F112870E704347F0DEAD3115B96CC6E454F86DC18B885094EB6E5E0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

23c29ff2-ac4b-4884-9599-f7c9e0ea0eea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\23c29ff2-ac4b-4884-9599-f7c9e0ea0eea.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

639235b9-0adc-4de3-8c86-d950624aa201.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\639235b9-0adc-4de3-8c86-d950624aa201.tmp
Size 211B
SHA256 9269ade93d9169cdc3fbd1245d3b689b72bcfa56b66d9d10607d909a9287b9bb
MD5 6b14168639c4267287ace7d834dadea2
SHA1 1c5d7bae8b567e7e6d488196a5ff89b288a7660b
SHA512 0b3989dec9ebdb7c3281c55db1ba0096d4dc77bf88b7179cba90fe42383c145f161077be97633901b2bc9fe3b0858059f32217a458d27f25f86d7d1c5203ab3b
TLSH
T1C6D022A3230870F6B97E2EE6D0BEAC8FC77600285882DDD820E2DC9B253786D6747141
MD5 SHA1 SHA512 TLSH

Submit Download

e6492746-9af7-4a23-b1e4-b30ed08da5ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e6492746-9af7-4a23-b1e4-b30ed08da5ed.tmp
Size 46KB
SHA256 b17408aa30cd8bce8f431c5eb6171e10ff67391c95ab58921f94aff35d9e53b0
MD5 82d927028d8809e8394c3961dabfc9e7
SHA1 878d2d3e8eb34bb195be2ab94ca2624ee2eceed9
SHA512 c18f8001eeda616b88e34095c40850e8000b99aa96be56d95dbe587a5760ee3a708e8d2d0c3be24b7af556172df73fd53a799745e94bec6165806f85b84a537b
SSDEEP 384:Dwf7yMVg71Epl+3RB9verRz1YgE75bzDvpBeBp0vtJqeMb5GeKH2SZZWB6eWepnN:HtOUYEfDYa1YfU/bHC1JKx6VMW
TLSH
T125239BF796F8C23DAA5299F0D798EE16CF6D0994432C3D8DC4D4BE8793A2422C541B0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee9655da-3304-48ce-ac39-ddfaf5e2bb08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ee9655da-3304-48ce-ac39-ddfaf5e2bb08.tmp
Size 6KB
SHA256 451d9baaa6fcc89bdab3057b9ff6d18e6f7e060570172b33a5deb03ff12595c8
MD5 eb29641c659786f9b763e75fc68b3106
SHA1 1088c94b73ec64818c3d5bc96f8fb9a29a39ab6f
SHA512 2cf54101e1db4dce0b4b201dd867f2ff533c6f3a817643865ead0d35cdcf80cf2dba5f4875bb94c76dff9d38fccc76a9f55ff982334b7a550e1f218bfa896c0e
SSDEEP 192:LUOUqUtUqU6UuAUmUEU8UEUXUcQUJUTUFUcjUpUaUQU+UJKUvBUVUDUSjUiUUw8R:LhvaT7pATTPn8hQuWghjaHzpcKmws/bx
TLSH
T160D17BD3E27FB42B2079887B5E49B80929B5E4391162A8F4DBD7C23E70C54F76613056
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2fa9964-af4a-441b-b9b2-be2cab412fcc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f2fa9964-af4a-441b-b9b2-be2cab412fcc.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 62dbbfd3505ced482b27ce31577189348c120e5cc15255d74541ec21f02af233
MD5 d9153b15811707fb9c925fcfc9f048b4
SHA1 ee5186aa50747b56999d25ec2fbdb1bb41fdd871
SHA512 1dd64cb0ecd1696b5009659b2cd6f810b4960c2ddf6a8fc0567641c47c38a1e9cd984f70f2880aa28f8f2da30d12fec28b3ac2d791c6a3a1a3beb335f0ed5656
SSDEEP 768:qF+zoU7pLuLb9oWgU6fgS8F1+UoAYDCx9Tuqh0VfUC9xbog/OVzLIIGUVrorN:qF+zoYEb9oWgU6fgSu1jaALIxUuR
TLSH
T1D2D2E97B740CCA7E4F800ADDDC197E9E6DA802CB9698C94047FE985D02C6BEA52164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a3f2b7e4-36f8-4f1e-b3e8-740413f20b40\index-dir\temp-index
Size 72B
SHA256 ca7c10353b6716bcdd1a5ef4086c618156cb05aeb9651abfee3203e445835efc
MD5 634cb1c18ef58092555535fd4ffe9ab7
SHA1 096c668ad3719bd20d669102153963d7604e51d6
SHA512 f3384d73f9243c38454d0424fa0f4041c8f1c0990d8539c9bfc7cb51050705ae119dcd47fdb9846a9f9ab68d33e77bf3f5d2ef845420d476b9561dd910b8ab79
TLSH
T1F2A002195B870013C00A23F126DB21622315CE914202530B41931144DCB35464E5145C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d5c12854-6461-4b87-8aa7-b2954fe0181a\index-dir\temp-index
Size 600B
SHA256 1dbdba121f31c9a4dce15f51708db49a013975331c851cc2141c8aa166f146ca
MD5 17614b5a810d097be0831eb89f20a710
SHA1 263d8dc343e41ee88dd902b408ca3ba6ec15dae4
SHA512 03054185a46e700e5e3ef03acf491173f7c21c2a24240eb1f81e2ea584de334834c4e46b57a98db9ea544960fdda2f6debd4aad15a13b62fc4c255d21138e800
TLSH
T14EF0A345BD115170FC6950B01476605C173171CCC6089D73506DD19EEC836E4BAD5B48
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 b6d6b65fb226ea91ad870a7747ddc679d22154e0b131f6f02151f6ace7de7a66
MD5 1c24b58fab672297b6639e02ad5717cb
SHA1 900156189ffc491591d8c6a7c7d407f1c3972c19
SHA512 8aafc35520d5f5358052e4879284ed407b92a4e0c8a7da0b60308b493f7fdb22d2ef7dd7081c170205448df542f577386e5a8d04b0c964939164e709c932ccff
TLSH
T148E0687B2DA72410EDAB9BEE55714090004138248904ED5F1029A3D360B23003856D71
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 542B
SHA256 53cd2e45afee4fae0b5aa81de559904e7451b9a0d863752899410c5bd4283f81
MD5 b5e0a77761788396f860bcde01df7459
SHA1 843b58abf71e36922ff7183416c3fdcd221514f6
SHA512 743e1c0f0f1d19ba00533f76560587a0a88f5593f2b1636dc004e2fdd882349043a3a3bed8a0b11f9866db884e6dcd148046b321faf6f4f7b7cfb6135aaaa275
TLSH
T13AF0125A4B185313E55603F768DA73842BB1C5088BEF9ADB954FA1795ED864834151C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 b0c6241672be8ea7912add1be783c255d4fcdb169d18508e729e950fbccdef22
MD5 f02dd1717daa679604a5afffde5dace4
SHA1 4cfd381db2c52245a5e2b22aa5a3041b35972087
SHA512 572b0384acd48afea54bdbca4e044c4f48337aeac44953ccddc2d4977cff2a0005c3bcbad6b4b65f5a9a3785a6ed04cb8c13369a22c13f4063d83e6866504a3d
TLSH
T1EAE086A42DEAD13D612A2043026C931897E5752BE6C43DA62F84CE88A547544F2E69E2
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 e036f56a499fad47e6f6db021e90545769a0f8d37fc307b3472e2e998608e878
MD5 554274afb2bfb0ff2863fae400b12edb
SHA1 b26dde2c3ec53cfa9a2110f7caa1500b47b0d703
SHA512 950955a2ee887a4b990b9e1bc9fd004d52395b3a4ce4e65afd09348540d9316afd4c7bbfa5801391b2e89bfe796d8b91495624f15de25217488ef97a0a4e58d1
TLSH
T128A002D18D51C041CD95427C90754F94235858D89619124180ED754CE8B755491C5445
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 28d1cadaf285b152c57429568e2003e80cd985f5364c90b8e32707fa12a3ef40
MD5 d2f6a9bcd619e493e5cf1be45b3c6028
SHA1 3a51d39c93d9ebab1e629988103ec04e3a0805e9
SHA512 7e9cab37587ae08db7f79de9ea6edb76d26548375e5d620189b3c9de3b2dc18a2ad0a63a1f237fc02fa99a149288f206e3e19b40a22f99af6ad45d69d362e9c5
TLSH
T105A00291C954C051D8941675D4B707847214CD984A056219E0ED93649D971A051A3065
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 48B
SHA256 fa65766d216dfe2bca816a4adbb9cbdfc9704d2b042b4352785300743227284b
MD5 2360610f8acb533e2fcbc14374e17b2b
SHA1 ede8258748a1148a5cb680e0ef235fd07dbefd9e
SHA512 3b00c19104c392ea27ff272fb49519a9a991eca22f8f643bf199a506058866ba6162f49d1c1464041db448d3528c2b7bda2c85470afd0daf4264d6155b915bad
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 16106b395d1b59a35706105a56e2f6bb2a658d0a3ded8b95d3ba60483645ed1e
MD5 051b063994200308df0b833303347fee
SHA1 1ebb478f96fe55e4a9655eaff6aa755f742ad62b
SHA512 2794aaac14bc6d040987740bc3b09430ae0c6ada7f38f6aa1f48ef474b3c6ff5aaa9ce9380950122d81e5a0cfc8dbd099225c1809b89c5126940e6b7b29915e6
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 184B
SHA256 13f8a30d01457564422d8d57e9bfd6526e593d2687ef130a52ee424003311de5
MD5 36de4e6e9d9e65e39704140c752fb8c6
SHA1 d8da90f8d37c42a3ba2f17e1d937b9ac1570c763
SHA512 6471bb67ca0ed9020499ea9c4dedc4c461646bf05d62e4f0ef57c4a0d464ca6f818be4ecf4837424d94bef759bc797618b585ce8ebf73a219dae025987586fd6
TLSH
T19CC012447F915712C48A46311390E3499B41E0064052142FB88C96000A569C4AE439C6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 54e2047b55b4660286425b75cc378006ce4564d595fe5c8f9f0a37868c5a2acb
MD5 5530cee39f772e59550eb1f96eacf35a
SHA1 8e77ad03d2583165b8436e80d847a5c4886c639b
SHA512 74c517424594b1acf7ffe07800dd519cfb95e890db718db896b5c5b667e4fbed40eacde7bdc35a91a0b214d6c17e4616946d3ba803120a2b95b891d2cf8a9b4d
TLSH
T196E0D17439DAC32E515D20870264F30C82E27419D6C65E5B3B08D944A20A180B397DA1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 6616adfc7b615d7c701405a245199ffd4ac6a23781bd18484b125600bf684f3d
MD5 b214fca8286216e8badc7fd6614a66a8
SHA1 23f1ba8037b464aa39cfbd84a2b4b4a4424508d4
SHA512 a97bfeff4216fdcf47dcece12e8aea018eaad073c2c2019ce94e8335ed77b252c714d351a1e9761b40b7348c71d19435114d314092804c3146e3baeaebbf87f0
TLSH
T1AFE086B469EAC33D505860C702B8E71DC7F0781AD7C47EDA67088848E546154B3FA9E5
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e44b85c417a03b0876fa70fa0c3c7cc7e97700e348ad799b49fa4fa8db90110d
MD5 ef9f3a89f20f84b69db5c6701073e354
SHA1 5576783b7d2dcb3fcf3217d347be51bf32cb16f7
SHA512 f961d157b3d1673499c251fc1c06a47de3ca479345ba42900077c41c3850393c2b8bd6ebf9eb247171c304a0239842ce4143bdc2a6dd9c0b2597aaac61293b2a
SSDEEP 96:KRUAKlKOyYgK1CT0JIEaG6ouO37E8oKMtEyoAccHyElaz:H7XAJC
TLSH
T17591C59674BF8220383D261C0179841B999234F37069E9FF775862650E2FDA88DFECD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5b8dec9-ea6b-4c4c-9bd5-6e529483476f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5b8dec9-ea6b-4c4c-9bd5-6e529483476f.tmp
Size 16KB
SHA256 0b7b6be3a474ac92ca60a7da644be9d198162606db88579282d418e13a8776a6
MD5 e18c0561db0f53fd978a40f7ee7fabc6
SHA1 b0e100e34f9b88553441134a97c2e0d5a09b895b
SHA512 daf7b5f7147fcfc0cfcba2478c30e9c4d99de5ef1415276cedcf655cccb06bcf394f6512cb70896fa13fc66cdabef00388b90d085f198ccdde066d0e04496452
SSDEEP 192:sxRdR7ScBz+/fBs5qmBxb6u2oA8pJfbq8P/g6+WN476yHH//4o8E36WGInjh3jG1:sxRdsmz+/fBs5HB8ER/5m//kvKhGThes
TLSH
T1B072F8426924997B4CCBD51AFA35BF62D7F90022E8D54E8DB6FCC52C04DA5ED2203C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee02613e-4c2b-44b3-8afe-dee094d5bc4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ee02613e-4c2b-44b3-8afe-dee094d5bc4b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 d3d602dd5cb72abc277f50212e84dc4526d1b9a3c2be145171d56de1ccaa4a7b
MD5 5b7ed0663c55500f68b0d4c1ba45e47f
SHA1 3a4029ce966325be47dd259b72d5b402151d62ad
SHA512 97cdd45bda59f1d35fe3f0ac2229c80b3bca62ea384644e52ecaf4bfc915e7812549c3341fbb1b859ece6032b26a1d9681193da9894fc67d8f3eb293fb875ba2
SSDEEP 3:MsEllllkEthXllkl2zEflMfxcK/:/M/xT02z/fp
TLSH
T1274404147FC40445C704103143D1C3501771D410055157C334D1C433DCF77404C01004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 39b23adfacd6a06365f741ee93daa2f30621585751ac68901d883d7d96ec3f61
MD5 d23053281d150df1e3ad6d4a1415b96a
SHA1 f7a174b51e58fbcf2327aaa81ee9e73e35e0cb45
SHA512 2087045daadc06d725cc838406af4018b88ff40eca2c1aaac62494c5b8daa39b6cb85c79224247c0c84c716eeb96d43dc1f4c1a8d56a0689500eef4f1df535bf
SSDEEP 24:TLE/j0afDdWec9sJVUO13m6HXI6aAM0sxbe1jy:T0Dbg34UWHXIwM0s9eVy
TLSH
T15292E121B9312427E4EE0B7AF8434CA00DFC02AF8EAB745089A00D915862BD27B551FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 afbe8aa826f6ac0166139009c16290b2bbd0c22e47e4cb210ba8299baa41daa0
MD5 5af4ab0e390c6a84a22f33d9742a55ba
SHA1 788b45c871480b77618595a7214251704281e2a4
SHA512 e7f28feed279242b462143153f282899a367d2df80cc265f9409d14b3cdcb7af859b3e286b79cae8d53bb5ec160bab5ebbfeca76a8382f052302784aae9fee71
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 71bd4a30b1abbb9d0a9b597703497a09519e8d69c6488814fd9e9e730d73c827
MD5 60fd19be1f9e6673ff9e069a1f005245
SHA1 14882b3f79dd312a3b429efe957a9efd6d55d851
SHA512 3b8acb484ba98b03375f67327a51dab1d00c9140146101963f262b14cdae70f426f67ec936c6a6183a9d2d10c6186ace8085ddf8cbb32aa3a9cf5870f8a2f98b
SSDEEP 3:MsEllllkEthXllkl2zEflqWl:/M/xT02zLW
TLSH
T1814404457FC40405C50010304051C3501371D45005D157C335D144375CD77C00C40054
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

a731832c-f505-4dc7-b10b-3e5f4a7efb2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a731832c-f505-4dc7-b10b-3e5f4a7efb2a.tmp
Size 34KB
SHA256 d0c74c1f53c949344584b92eb236407e9334b8b5422d00b4d9472c9ce67cad30
MD5 25203e296a20c3091e45a7a0c07b98fe
SHA1 fa6297e4e4c4e3c5b941b487bb8797e9ed254014
SHA512 ee4b3d1f037d02648438ce9fd1fae979bc43cd8d2f0da410355d239a452d3c103aa92407dbdab8ce33431c04c0a2ce01b0fa1c222c872122d0dd13a14be3527a
SSDEEP 768:zA3ZeIKK3ONtaM1h3Yogkl5akl8pbHW0AWDN3DrgvP4Nf6:zA3vM1h3Yog05akl4bHW0AIzrgwf6
TLSH
T124F2AE70A8B5AE734DEAE245B11A7202BFF895679AC84EC594DDCB0E01576EE070BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abd976da-8577-4446-8e09-0a1090a478c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\abd976da-8577-4446-8e09-0a1090a478c4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

91f9e1b3-be82-497c-922c-36e8e6a6eef7.tmp

Path C:\Users\Admin\AppData\Local\Temp\91f9e1b3-be82-497c-922c-36e8e6a6eef7.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dcb23898-7c41-4f1e-bb28-c385f539d89a.tmp

Path C:\Users\Admin\AppData\Local\Temp\dcb23898-7c41-4f1e-bb28-c385f539d89a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5816_673061292\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads