hxxp://getvelocity[.]llc

Resubmissions

02/10/2026, 11:09

261002-m87pnazv5j

02/10/2026, 11:09

261002-m87dwszv4r

02/10/2026, 11:04

261002-m6mlpsyapd4

Analysis

user interaction
yes
max time kernel
187s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 11:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://getvelocity.llc
Sample261002-m6mlpsyapd

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1420_1500030323\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1420_1550158249\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1420_1550158249\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4728	msedge.exe
4940	msedge.exe
4684	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{E7EEC210-7FE1-4E80-B785-F86CE1119214}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{02D246D6-502E-4183-B27A-BA54DAFB490E}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{7AE5B914-7DAF-47E5-A59C-E1FC5E24D523}	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
652	Process not Found
652	Process not Found
652	Process not Found
652	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 41 IoCs

pid	Process
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3840 wrote to memory of 4480	3840	msedge.exe	87
PID 3840 wrote to memory of 4684	3840	msedge.exe	89
PID 3840 wrote to memory of 4660	3840	msedge.exe	90
PID 3840 wrote to memory of 4660	3840	msedge.exe	90
PID 3840 wrote to memory of 4660	3840	msedge.exe	90
PID 3840 wrote to memory of 2940	3840	msedge.exe	91
PID 3840 wrote to memory of 2940	3840	msedge.exe	91
PID 3840 wrote to memory of 4528	3840	msedge.exe	92
PID 3840 wrote to memory of 4528	3840	msedge.exe	92
PID 3840 wrote to memory of 1384	3840	msedge.exe	93
PID 3840 wrote to memory of 4528	3840	msedge.exe	92
PID 3840 wrote to memory of 1384	3840	msedge.exe	93
PID 3840 wrote to memory of 1384	3840	msedge.exe	93
PID 3840 wrote to memory of 2028	3840	msedge.exe	95
PID 3840 wrote to memory of 2028	3840	msedge.exe	95
PID 3840 wrote to memory of 2028	3840	msedge.exe	95
PID 3840 wrote to memory of 4332	3840	msedge.exe	94
PID 3840 wrote to memory of 4332	3840	msedge.exe	94
PID 3840 wrote to memory of 4332	3840	msedge.exe	94
PID 3840 wrote to memory of 3916	3840	msedge.exe	99
PID 3840 wrote to memory of 3916	3840	msedge.exe	99
PID 3840 wrote to memory of 3916	3840	msedge.exe	99
PID 3840 wrote to memory of 1440	3840	msedge.exe	100
PID 3840 wrote to memory of 1440	3840	msedge.exe	100
PID 3840 wrote to memory of 1268	3840	msedge.exe	101
PID 3840 wrote to memory of 1268	3840	msedge.exe	101
PID 3840 wrote to memory of 416	3840	msedge.exe	105
PID 3840 wrote to memory of 5760	3840	msedge.exe	120
PID 3840 wrote to memory of 5768	3840	msedge.exe	121
PID 3840 wrote to memory of 5776	3840	msedge.exe	122
PID 3840 wrote to memory of 5960	3840	msedge.exe	124
PID 3840 wrote to memory of 5960	3840	msedge.exe	124
PID 3840 wrote to memory of 5960	3840	msedge.exe	124
PID 3840 wrote to memory of 6020	3840	msedge.exe	125
PID 3840 wrote to memory of 6020	3840	msedge.exe	125
PID 3840 wrote to memory of 6020	3840	msedge.exe	125
PID 3840 wrote to memory of 6120	3840	msedge.exe	126
PID 3840 wrote to memory of 6120	3840	msedge.exe	126
PID 3840 wrote to memory of 6120	3840	msedge.exe	126
PID 3840 wrote to memory of 5172	3840	msedge.exe	127
PID 3840 wrote to memory of 5172	3840	msedge.exe	127
PID 3840 wrote to memory of 5172	3840	msedge.exe	127
PID 3840 wrote to memory of 5044	3840	msedge.exe	129
PID 3840 wrote to memory of 5044	3840	msedge.exe	129
PID 3840 wrote to memory of 5044	3840	msedge.exe	129
PID 3840 wrote to memory of 5848	3840	msedge.exe	130
PID 3840 wrote to memory of 5848	3840	msedge.exe	130
PID 3840 wrote to memory of 5848	3840	msedge.exe	130
PID 3840 wrote to memory of 5864	3840	msedge.exe	131
PID 3840 wrote to memory of 5864	3840	msedge.exe	131
PID 3840 wrote to memory of 5864	3840	msedge.exe	131
PID 3840 wrote to memory of 5880	3840	msedge.exe	132
PID 3840 wrote to memory of 5880	3840	msedge.exe	132
PID 3840 wrote to memory of 5880	3840	msedge.exe	132
PID 3840 wrote to memory of 3956	3840	msedge.exe	133
PID 3840 wrote to memory of 3956	3840	msedge.exe	133
PID 3840 wrote to memory of 3956	3840	msedge.exe	133
PID 3840 wrote to memory of 4444	3840	msedge.exe	134
PID 3840 wrote to memory of 4444	3840	msedge.exe	134
PID 3840 wrote to memory of 4444	3840	msedge.exe	134
PID 3840 wrote to memory of 5128	3840	msedge.exe	135
PID 3840 wrote to memory of 5128	3840	msedge.exe	135
PID 3840 wrote to memory of 5128	3840	msedge.exe	135
PID 3840 wrote to memory of 2068	3840	msedge.exe	136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://getvelocity.llc
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,1498083321973648567,5404012083450528312,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,13345830874442183945,3646614375335288573,262144 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,4630667959435066544,15810051152110588940,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,12182415661709245373,17539118926020726867,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,17136309972933067760,7493806288576048621,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,12398251524921787105,2211785188215664148,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,15109061793031539059,682144961610228679,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:2
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3684,i,12247118154534018927,2990685918338507719,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,4024360805758262504,12183795318199965065,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,4432438997056067714,15628216757174622230,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,9176105387015101367,10775233274910065010,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,9176105387015101367,10775233274910065010,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,15530808458819550397,5878363052690706953,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,7588011005029710654,16536095702635195758,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,11681774495338200933,9213507413926392113,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5316,i,15856574404774108133,18162882864830961264,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6132,i,1339718923498394262,9043269885358899888,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5116,i,785034339632407086,13809008897951756749,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6296,i,7107274601779460516,14182510311040638687,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6532,i,12477068161386384175,164121173941147644,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6508,i,5635214055630069697,4782728810591858610,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6488,i,17599100301548765667,14765883098215101191,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6756,i,1125794221910928055,3353895726006475816,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5628,i,16051352914811372921,6492053626575831150,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5204,i,9139475656714824215,9727630139355578198,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5556,i,3351798363482207704,18330489765986008130,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7216,i,12824218834812888934,10623895182414965301,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7352,i,5597103382062578966,17718851173975787791,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=7360 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7352,i,5597103382062578966,17718851173975787791,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=7360 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7416,i,1604280884250461916,8534376122000241340,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7680,i,169511468916023441,16912239489049799741,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7360,i,1131308748702968834,9286974931898079572,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7360,i,1131308748702968834,9286974931898079572,524288 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=4952,i,13008894309476352170,1379102964617529199,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3460,i,8154637081728225963,4477233401417090887,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8060,i,14288246390202777385,6748734184811428775,2097152 --field-trial-handle=2296,i,16144679682973525978,11443306684799118835,262144 --variations-seed-version --mojo-platform-channel-handle=7208 /prefetch:1
  2⤵
  PID:6004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\GroupRevoke.shtml
1⤵
PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument C:\Users\Admin\Desktop\GroupRevoke.shtml
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:1420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x254,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
    3⤵
    PID:5976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,11941667133697293681,12441576843401416442,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1796,i,10598814240214817633,1614877940199645717,262144 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
    3⤵
    PID:5364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,6310704815689208754,5128260671423242843,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
    3⤵
    PID:5356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,4746090400384593035,2994518290091482234,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
    3⤵
    PID:2388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,11652853949322505210,12765415068979156012,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
    3⤵
    PID:3792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,5111704454944160237,10738183271194769744,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
    3⤵
    PID:3292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,18141225456598746763,5308281345073756960,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:8
    3⤵
    PID:3468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5000,i,17643778076983061696,6211110304750596137,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:1
    3⤵
    PID:2348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,4711843203009041685,6548626731650230552,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
    3⤵
    PID:4360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,17095636826805734880,14389912523527343291,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:8
    3⤵
    PID:3196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,16562336840861895507,1291036119030253602,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:8
    3⤵
    PID:4516
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,10671433819289287309,1825287209193594963,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
    3⤵
    PID:5836
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,10671433819289287309,1825287209193594963,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
    3⤵
    PID:5768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,6394403504329721900,6829056131072483746,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:8
    3⤵
    PID:2456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,6134015952786723194,11558479418567138797,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:8
    3⤵
    PID:748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,11495687454739249653,5134013099407266760,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8
    3⤵
    PID:3776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,8046027006008270644,2620893431425188332,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
    3⤵
    PID:3476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6984,i,13650198631986491138,3911074935819450710,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:8
    3⤵
    PID:1020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6988,i,11829470143836433532,13693543952151142283,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:8
    3⤵
    PID:1036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6992,i,3645874849020532343,15873430343602351633,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
    3⤵
    PID:3120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7020,i,6673549732835177321,14381093063092682487,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:1
    3⤵
    PID:4632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,10204982983627239495,1019593506785568095,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:8
    3⤵
    PID:1616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6816,i,11958015264819655954,15512477036072731567,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
    3⤵
    PID:3968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5700,i,1857163546400371998,14066503095618843220,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:1
    3⤵
    PID:5848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5728,i,14340065749828076543,16473439900752049964,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:1
    3⤵
    PID:4232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5336,i,4804317712823436978,7509798661352079116,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:1
    3⤵
    PID:5744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7312,i,6147494246506049796,18394786425732085764,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:1
    3⤵
    PID:5644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6732,i,15512161122237400625,4452583186452765168,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
    3⤵
    PID:2940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7600,i,9334272919026336046,1582053361279156449,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7572 /prefetch:1
    3⤵
    PID:5172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7676,i,827278450805588347,8655799044404727624,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:1
    3⤵
    PID:5192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7848,i,4762305642679018789,4108471635236120275,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:1
    3⤵
    PID:5856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7540,i,2190149338638232478,1091647173971845802,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:1
    3⤵
    PID:5968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8296,i,4697677517237168235,12754146929418874710,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8316 /prefetch:8
    3⤵
    PID:5280
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8308,i,3397814762466498479,6389481960530847275,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8300 /prefetch:8
    3⤵
    PID:3496
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8308,i,3397814762466498479,6389481960530847275,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8300 /prefetch:8
    3⤵
    PID:5952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8128,i,9155084440849441039,14142283919211058926,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:1
    3⤵
    PID:5920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8640,i,16158683068336707249,2437528707624594512,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8660 /prefetch:1
    3⤵
    PID:3280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8616,i,11213154759249410059,18340227382861630641,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8552 /prefetch:8
    3⤵
    PID:3504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8604,i,9520698599136880037,280125971313868691,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
    3⤵
    PID:4232
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8340,i,8060501043465606097,996405815210189727,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8676 /prefetch:8
    3⤵
    PID:6052
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8340,i,8060501043465606097,996405815210189727,524288 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8676 /prefetch:8
    3⤵
    PID:4224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7660,i,1271202018948842117,14742002541307396313,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8280 /prefetch:1
    3⤵
    PID:4788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8836,i,3143777909376254579,11261553779067484028,2097152 --field-trial-handle=2252,i,11293194962896932318,12300466128069632231,262144 --variations-seed-version --mojo-platform-channel-handle=8748 /prefetch:1
    3⤵
    PID:5384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies registry class
    PID:5524
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
      4⤵
      PID:5496
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,73585042816863026,18223622351036884973,524288 --field-trial-handle=2380,i,7328113373081236350,12668754995762455954,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:3
      4⤵
      System Time Discovery
      PID:4940
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,5636870122811336843,3384227719920807021,262144 --field-trial-handle=2380,i,7328113373081236350,12668754995762455954,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
      4⤵
      PID:5568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,5495303533349286791,8350849865057423202,524288 --field-trial-handle=2380,i,7328113373081236350,12668754995762455954,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
      4⤵
      PID:5836
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4088,i,7939575851477798290,7060597345662309986,524288 --field-trial-handle=2380,i,7328113373081236350,12668754995762455954,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
      4⤵
      PID:5180
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4088,i,7939575851477798290,7060597345662309986,524288 --field-trial-handle=2380,i,7328113373081236350,12668754995762455954,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
      4⤵
      PID:1740

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

protocols.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1420_1550158249\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

02ab47d6-2601-4b4a-8652-97ccfb638e8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\02ab47d6-2601-4b4a-8652-97ccfb638e8e.tmp
Size 30KB
SHA256 ce7ee2ebed27e4e534ccc39dd25eff60c08c525e94773b11f40ba6473e8804ce
MD5 867f3e1174bb8033c3c7e1e7f33a1487
SHA1 a9d5fc4bd492920874cfa8fb0875df547ec79ba0
SHA512 8d4c4d53f4a12c05fd62ef6437d005f78e42755d3db48450210b5effd0a82de1230f11c9d56fb1cfe2201de4c4ddbbdda7898e2d70fe88eaa3902ef82871a848
SSDEEP 384:nfiFPZcIXtsN+8TUNTUlIlPTrHpADbIqy2SDfxa//2w3KYtgOIwZOyJotgU/7Izy:qFHdJwguy/a/1KYXs/+ad
TLSH
T128D2C4F598D79976E8AE4383A37E7E029EBCC163B5884980B7D95D0CCC821BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a3167fc-c62a-4a88-832c-904d31511db1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a3167fc-c62a-4a88-832c-904d31511db1.tmp
Size 8KB
SHA256 dee70daf1008375a7ff675abf728d686a512b2850d97d1411fea19f2da9e3f30
MD5 5ed155c2f1aea540d15d457cc64353a6
SHA1 3a1f9cf10e1ab4e4878322e5c5c36b50bd2152fe
SHA512 373291c40b6a10e8a134655084176509de221b017e47f84ad7da1e67ca1d0f4697d60111614cffa871ac7169bf868bd7679ab87a13035ea36fef667c886e1b65
SSDEEP 96:KqONkGQsjpfbUmjH5ih/cIPURHl8h4otop5BaDxBKP4v+Y1xf//ojdnx/yw8eBCl:BON+6JUm0QmiUy6Hso//aywNBC86U6
TLSH
T10B02D838BC687CBB9EF3AD45B48777239FA4106BA6911F84DAD91E1D01D725C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

297f0736-0bc9-4289-a8bc-ef687d42bbc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\297f0736-0bc9-4289-a8bc-ef687d42bbc8.tmp
Size 26KB
SHA256 ff5bc0e6f547bbad5526545f402af946236bafcf7a0303b8c8a67027c48e9814
MD5 28b9f42e5b30d38e1a49ded0ecbdca31
SHA1 ca90599a93223ab3f62b9c13ce3e6587b787f450
SHA512 81f0989804a8253f6012576fded5dcd5e72dad62ec8ff02a59a352791e12215e62680988ce5a9751d26286591a674c4867911be56c07b3f03fab934173410ab7
SSDEEP 384:OiFiZcIXzsNG8TUNTUlIlWwHpADbxbRph//2wWptgOIwZOyJo6oZf:lFQDLwgIn/wpXs/6af
TLSH
T195C218F248D7987AE9AE5743A77E3E135EBCC063B6809650B7D95A0CCC961BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6952af96-60f2-4f8b-a72f-7dbc4b04c118.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6952af96-60f2-4f8b-a72f-7dbc4b04c118.tmp
Size 8KB
SHA256 3d9079e4e5491754249f305acf3bc9532da396446cd61ae433acd6ca89c9ecaa
MD5 dbdf5d21340d2576af50be4656e13d1b
SHA1 064b742f3b487cf1b29075793022b27a63a2053d
SHA512 dbe71cbf311f26b997dfb0f3be404aeef19c69b7f73390a0651de0655056df25bcdc0fe3f6d4bc2a806001b76f14f5a38e134c7c629d91540947883f46884a33
SSDEEP 96:KqONk1QsjpfbUcH5ih/cIPURHl8h4otop5BVDxBbP4v+Y1xf//ojdnx/yw8OxwLa:BONd6JUzQmiUyPHLo//aywwYNxPq6U6
TLSH
T1D012F935B8A8BC7B5EE3A885B08736135EA44227EBC56F84DADD1E1C01DF25C5307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9675db0b-6b5b-4783-84c3-62febe50dcc3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9675db0b-6b5b-4783-84c3-62febe50dcc3.tmp
Size 18KB
SHA256 e623c09b4ecd60c7c99a7f758474c40ccb25cd1b5026cca8187b4551898616e3
MD5 a7580bd6581adf34142a94658e8bc42c
SHA1 ff1bbc6b26a350ab71bee8a9da5143757ed2e903
SHA512 28c73f688c1e23e8e218f55973a4c44e25563806180701bd906634922ad4e4d3e860a65c43b4517d2764792692af51dcabd9bc7aa8fa792990a614497d185f1e
SSDEEP 384:BZcIhsNcWwHpADbxb8ph//2waptgOIwZOyJo6oZf:JhPn/QpXs/6af
TLSH
T1BA828D316CB8AC7B6DF7A185F18737135FB48077A7C5AB8099EE9B1D01DA198130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f7e901ff3df2d769334a9a6d3d1825c832dead150655a1e08b1ef005d0292c1c
MD5 54b5c89d12a534155a20824f377fc719
SHA1 633c3f7842f6f8f5fca6889975166d8beceab229
SHA512 232113d19f85e9404efda63cedba3028a48c801cab50f01744982526b2603d87acb2c9b209ffaa2266ed46e4496bd525b77408f425a951d529554a9790832746
TLSH
T118D0C06096B83ED9E131203F03700311348C01D351136100D85000490BE808381C1CE0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9d5a51e82c5a5cf746e04085fda481178391854eca59bdbd9734aef7702fc0b1
MD5 5d4e4f30b57de2277dea04c362ff8044
SHA1 3d23c912cb7d327cc050e1ce5d39b84fc64bed0c
SHA512 97bc1627fe72437dc85028e140f6f2075d295e9e6c98a425203145d15afc9334a16f22f137b3f607460a9e9fcd126c6a1f172ab05311b26fea362edcfe7328e0
TLSH
T1A4D0C0E4F2B43DCCD212083D02114311B4CC92907C13F000F8506058239E56282804E0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 830b3aaecf3db985d41f2de8591b83bf6a0296535d2e9c3539ae254be2dc8494
MD5 9afa326c94917ab9bc518e1f73b5e3ea
SHA1 2be2f1fd96a1b3d5f64cb0d504ac3db4242b866a
SHA512 b532e860f41a56e122c295aabf5cfc1c56ea7072b44f09788f0f748f8f522ffea1451f7c93bf195c1f874ab3da757cc68653971b78ae1c363f0cb459400029dc
TLSH
T132D0C0E4F2B43DCCD212083D42204311B4CC92D47C13F000F8506058139E56282C04E0
MD5 SHA1 SHA512 TLSH

Submit Download

04977708-431b-40d2-96fa-414e662e037a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04977708-431b-40d2-96fa-414e662e037a.tmp
Size 414B
SHA256 cb08c6ffde7da4bc5e2e5951ce192d81e8f4d06a464b6898805edb1eecd614e3
MD5 f4562d9b23d2eb6e45e87c1202b2f29c
SHA1 533b9251510227becf56f7688c33c826a5d30c27
SHA512 4513a3d471714d177168498e9cc485a8334566a913e3b20604d22d0b2455a088202a76410a7a4f8a9cfe9ed950b0260c0b29c00fe722dd475bc0f5b2bcd9967d
TLSH
T1D9E02B99CD61FC2708FD5F5A60594606FB4413572E40890F363E821D8F75B3B458696C
MD5 SHA1 SHA512 TLSH

Submit Download

05e20ec5-864f-48f0-a6e1-213297b542ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\05e20ec5-864f-48f0-a6e1-213297b542ab.tmp
Size 10KB
SHA256 d0cf3aec3644510fd325f5c72ebb6305dd099489ce32507e0a88b1b14a379982
MD5 76e797dfb4febd73c09581a90f28dd62
SHA1 fc55b6e544d5542562c20cdf009193366b764c4c
SHA512 31b2fce5183ba494439baf6d809f3382967f32a136201c890e4e5de8fc817446ab2738a190fe0b98a51c537de71cffd6d46e9bc83b6841dfbfdba658f4930857
SSDEEP 192:sxZTRGWA/fYsbPIdpqh60HW6+WN6dRnXY36qoEVZIg5+J:sxZTrA/fYsbgWHbmXXIPo
TLSH
T1E332C9526D7879BB4CCBE20ABA15BF13E6F9513250D11E48AAFD8A1C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07c23cb7-4c8f-4c1d-b900-dd1e1558d643.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\07c23cb7-4c8f-4c1d-b900-dd1e1558d643.tmp
Size 17KB
SHA256 dced4b1d46c84174e2314e87542a53155ec075fb257d664fbfeb22bac2ae458b
MD5 9f9ead0884f311e370bd8d3e8a281db7
SHA1 81eb7000d63ddf16453a883d08e4227a9f85c7fd
SHA512 85634f508793a4af3a63f989f901957cd312bfc1b064fc012b820b16eaf717e65d61be7b7b0911d898d79c54d9cb5a26d904d55db1e78d9d7bea307acb18a6e6
SSDEEP 192:sxZe9RTkA/fYss+WpV1ovWH6x9b76iodp46/17QHW6+WN6vRDZt4IuWV6/Y36ma4:sxZe9eA/fYspWv10jhAGHbGu1/7KPkfM
TLSH
T11E82FA42692498B78CC7D51AFE34BF22D7F9112398810E5CAAFDCD1C04EEAED2207857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c3082f9-ff8f-4ed9-960b-96314ed14b92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c3082f9-ff8f-4ed9-960b-96314ed14b92.tmp
Size 16KB
SHA256 3694ccd557193d5fe21a74b5dc511bcbf57e6fd364ea4e6b5b8e1ccc317bc7da
MD5 b01cb9261ca777e29cc02b686e762713
SHA1 7f4a74259d373aab128185454630ca489300d54a
SHA512 a92a34a59ea48ddca6568e2282102e82ee1d02c2fbaa93b490368c95e01e7f6409a0bd2db7aa900aea21e7975b661868e62c9d8aec08d02b38cee60cd271550b
SSDEEP 192:sxZe9RTWOA/fYss+WpV1ib7Fodp4S/16QHW6+WN6ODRnSIuWV6/Y36naEVZIgblF:sxZe9EOA/fYspWv1UaNHbtg1/71PkfM
TLSH
T1E172EA426924D9B78CC7D51ABE34BF22D7F910239C910E4CAAFDCD1C04EA6ED220785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2553c91a-040d-44ad-bc8f-4c5262fc7ec1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2553c91a-040d-44ad-bc8f-4c5262fc7ec1.tmp
Size 11KB
SHA256 1336236e628da91074636623aa35f410038fd654d69f48cf93e0ffc564ae7f73
MD5 9e6024e0a97c3c4c85bcc2076457cc82
SHA1 dfdcd5300789c17eae15a4310ffe7a481d85a266
SHA512 92ee2170d90ca93321f7c8a6bd3112c7ffd018259da72fd30f51c7fff4565ec6fa05f98ec67ad813c5c4811e07bf2f936976e787b0e1c77e811ee1e3f8ee0be0
SSDEEP 192:sxZTRGWA/fYsbKIdpYh6SHW6+WN6dRnXY36UoEVZIg5+J:sxZTrA/fYsbDeHbmXXyPo
TLSH
T1DE32EA526D78797B4CCBE20ABA15BF13E6F9503251D11E48AAFD8A1C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ed6088b-8057-475a-890b-e3fb663d38d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ed6088b-8057-475a-890b-e3fb663d38d8.tmp
Size 19KB
SHA256 b7f11a37363c8e5483b5b69f289591a1da0b265ae67736cd5d2b07de52a14891
MD5 94effe205225ce75ddd384539ce7adb8
SHA1 f81b0e9afb583ca06cc7ef09d63cd216426535a5
SHA512 e0d0058dd2cfa9cdf370a81ad5aabefc3a41f0c189199a698df5c2e200f934bf7ddcff8d71e2f3b6fa9cba5578fb3410891ee7715bc7ec7409bb83c484f3f67d
SSDEEP 384:sxZNDqA/fYspWv70ehA9HbX21/dweR/KG5U0pPkfM:sVqA/flY70e0HbixUfM
TLSH
T19E92D853693499BB4CCBD52BF934BF32D6F9112298914E5CAAFDCD1C01DA6ED3202847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cf4264d-9a57-47e1-94e1-2a987f189c5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3cf4264d-9a57-47e1-94e1-2a987f189c5d.tmp
Size 11KB
SHA256 50daa176f53a71edd13872461d3cb76295a3991cfdb3fa403711372f243c55b1
MD5 34071d14fd5545ed9ca3fb1e025ab0f3
SHA1 625f6490c40c7fac10824e5b7403f11e7e71d880
SHA512 215bc97118f2633aeb7e7665bb00d7d60e539f5edc5d33047b91cc1f9363ed45dc933b304373567f12ea0e8b322c9599fcca57da1c2bd71708ddb3c89deacb46
SSDEEP 192:sxZTRGWA/fYsb3IdpYh6QHW6+WN6dRn+V6/Y36koEVZIg5+J:sxZTrA/fYsbYEHbm9/XCPo
TLSH
T1A132EA526D74B9BB4CCBE20ABA15BF23E6F9503251D01E48AAFD891C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a412361-584d-463c-9d7d-aa8612ebd133.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a412361-584d-463c-9d7d-aa8612ebd133.tmp
Size 10KB
SHA256 dabf0c955deec1bf449f00e0c52d933e3e2da8fcec9a4dafecc761dd2a71a0be
MD5 4b0716b35cc23d608db76770c31b58ec
SHA1 613f212e5f99b3eb016cb441467e0c8413088d93
SHA512 2ddce904c7ebf292744e23a92a688757bbfb4d509c18ae88742945806990648dbcffd1a936a3abb45b8bf0024827755a318a071b86a226693329104f5b0c95f0
SSDEEP 192:sxZTRGWA/fYsdPIdp7pHW6+WNAu//Y369oEVZIg5MJ:sxZTrA/fYsdgVHb1/XBPa
TLSH
T16622DA126E74B97B4CCBE20EBB15BF53E6FA503251D11E48AAFD891C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51a962ea-034c-46ef-a58c-639716063a1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\51a962ea-034c-46ef-a58c-639716063a1d.tmp
Size 17KB
SHA256 61cbe937aca0aaeb7561c894959bb08ac056c6a55281a5d2746b3885f0853866
MD5 68931782123ebaa5c7fec6c60fb24d58
SHA1 5ed87dfcf22ee9df43b637f0ce711ef4721a7930
SHA512 3af4dc82fa046aa79708a0e23358efafb78887e869762f36f3212d9bb879f7c3abaaded59d894a59b85d6b7d6935554ffc008b5a1e57c3792fe97b34ef5e5e48
SSDEEP 384:sxZe9EOA/fYspWv10yh+RHbtg1/71PkfM:sG9bA/flY10y2HbOqfM
TLSH
T12472EA466924D9B78CC7D51ABE34BF22D7F9102398910E5CAAFDCD1C04EE6ED220785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f8d0cf5-3e45-42a8-84d8-b8fb02c9bb5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f8d0cf5-3e45-42a8-84d8-b8fb02c9bb5d.tmp
Size 9KB
SHA256 9e4fb0e5aea82a877e135386589b4a31158d8dab61241bb65129bace1c541758
MD5 fa62e50fe4f42233f9ed23ccede351c9
SHA1 76b1796225883d2c09fb038d4c3427093ddd906b
SHA512 21e6b6e7f367d8818ae3da58023f8261ba2d83b9026d85c824f9215df280543d93ca2e957747496f68193ffbfcc016d3db6ee6c9924dac241789d69e8d123a57
SSDEEP 192:sxZTRGWA/fYsnPIdp7pHW6+WNAu//Y369oEVZIgrJ:sxZTrA/fYsngVHb1/XBP9
TLSH
T1A122EA126E34B57B4CCBE20ABB15BF13E6FA503251D11E48EAFD851C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

874b45a5-e43d-4592-b67e-d3a37ad7f573.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\874b45a5-e43d-4592-b67e-d3a37ad7f573.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e3cc7cd-947b-45bd-aa6c-1ade58415c24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e3cc7cd-947b-45bd-aa6c-1ade58415c24.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

99f2764b-8ef0-4a7a-9c59-9ac1a625e8e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\99f2764b-8ef0-4a7a-9c59-9ac1a625e8e1.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 348KB
SHA256 f8a1b823a87944a3c4f17d3af703dc750d386a94ca4a6c6a5f8ba1b59791417e
MD5 e15a9442a6ee1704db873e81143552a6
SHA1 4e8cc552eb02f71fb3bf652376da6b2380898ccf
SHA512 e7e1ed61d90c6e32ce05a06b83a6d3175c178232a99fa7d297e17a67952c9f9b8d4d483ca4026d43ee0ce0662ab3bf5f662e0b905601e9a7c3b2bdf57ca176d2
SSDEEP 6144:jgxSiMzLJ2EDV18L01IvoqGiG4mCvRB3h9JUrwxWD2O9aGaclP:Y02EvY01x7cmCvRBR78Rn9X
TLSH
T1557423084B6DC4874E04C9AD07ABA1EC760335C60ED2DBAD406FB5ACF17266DA4635F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 24KB
SHA256 d549ee737a59e33cef9f7b2b4069849b4814c54752d9c73c9f7e54eaf5c14a4c
MD5 19a7bf4559b0e74112911f8d66cce5d0
SHA1 cae587a5587d9e659896c356b63888a38306f65a
SHA512 40f9a9dcac4cfaea8c1205cb948fce0ce7d59f345104eda0cd21ca312d2794a99d3032c5ca43389ea249e74584e10d301a2f1ae4f6a05fb069d4fc5689edfbcc
SSDEEP 384:xNL7J77MRAHRH7V6n5XaPRWvHT7tfEVR2Cp8rfRCmgbL2IR1QNancIuzdzLA0Xgb:xBR7McRbkn5j12gCp8TCcNacI6xBgke
TLSH
T10DB2F18486064C9BFAE7E74D12C7CC57D92485D32F9EE60E6204EFF3E9D64D6260A903
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 70KB
SHA256 937ba85886091685ee70eb6bc643fefa7e2d2c0e1f03505221d6a48d46ffa37f
MD5 e0b961ad8d346b967d977ed3a5ccf56e
SHA1 36fab6d1abfe667982feea6c1037b64fdf5a60bb
SHA512 d64b71091eedf3c56636fe7325053146bb8f9175c110ca78cf6e198a6045ce7e562dbe4b6eb4c85de6e300a419bfba74f30c69bca1db11901a7707b790d9918f
SSDEEP 1536:MSskPFSEEoUuYrkMZyF5sagOPZTDdvb4oFd3VQLjK3eRDTMHbQNcF:LPhvYrkVF5sNOhGUd36vK3eRDTUKcF
TLSH
T1DB6302D00490E861E47751AB306FFC81895ADDA049A5E8F09FEB54C8E959AD80DFDBCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 418KB
SHA256 676d4a63ae67ef87cad323b26340c67848995ac2683780243a52c98904c57132
MD5 a30592a41da98d3fcd81a67284e875e2
SHA1 88982c3a1f7223746a296dd0ba36f0eda7e741ba
SHA512 aa1de00acc50af1f4e852ed6c085bf3ffa7c8e9cfe98a00d0aaba02efe1a99682fe0f09e1dbc0fec2910f015fdf94dce3555c54f3fcb5c62f359c8331977d3f3
SSDEEP 12288:OwU1uVIVDAJaWuUxG03NI5GxDH1nfu6yrR74sY:OdEBJaWuUo0dD/HoR7XY
TLSH
T1AE94239DC93326953438AD826F79F95BA24D75406314E69E28803FE77C093ADFEC04C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 206KB
SHA256 27a52be66d9e799bda613d94bc824c6be07c65fa3c89c3c09a4bc55230b8429b
MD5 6dd18fae73df6165d699340aef5c127d
SHA1 bbcb2bb2142700a9475861fd6e3f82b8865c7ef2
SHA512 e90a639d137f0d268461340c6867ff7aac01e2ade3369f9d9f7f8d31cfcb167b680f89e5e6ac70d0c1edf755eb2ae4a0382e8ab42756f2426a8ec4cf0648f295
SSDEEP 3072:41Z09Q4hNeUesOdSlwLDBLReFMeIczGV/vQxXSRtP9Xc9ji2UBepKaYN:Km9bhNlesOdSYIdIczm/vMSvFKtfe
TLSH
T1A92423B3CA8650D73A444467A17CD84BF5FF7EDFD8A0087862933AB7484A58440EA67B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 78KB
SHA256 22d31bc2ae591382f2445d2b5e976928961b2bb70ae28e3207f761e716717099
MD5 a43f114429de90373ce34d6a0a460aff
SHA1 ff6f9fffb85f8151b49b9d96e2061355939f8457
SHA512 5bc98f4266f38ea9e06e76ebe7163d0b781cba7f6bf259379fc42be4948a7a85ad92bfcf2b56aaa0c5ebb5665b30fd377cca8c103790a22b03ef962a32e694a3
SSDEEP 1536:KmSCAdY597erLHb1Ctp8h1jpq+yDbW1Jn2/czcaIyJcHvA33hnf:YCKI9C3HopMJ4aDn2shHJcPAnhnf
TLSH
T1877302630A1B664485BF2EDE1E0702757FD4E217DCF0D2D283A274ED9A22D1CD9C2D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 27KB
SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
MD5 8b2b699d8117447930c6ec35be5ce1bf
SHA1 4755bb0de47453d0c7c9d3554c0817fe43b16faa
SHA512 0ec74a140efea57cfe62e43b184deb3367c941e338a1394a4fc2483ec391e52e9caaf43200c3a970660cdf74a5692a7a083ac79675397fe4cb90b585e3b1964d
SSDEEP 768:tOtXHHGSKIj3A/HUtFb6ofBs0ltoijHHkJtmZx5WOCL:8Br7A/gFb2smijHymn5W
TLSH
T1D8D2D16FBDE86F44943C5960790232E1419E9A70B384AF372175B2B175378AE6783CC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 59KB
SHA256 85593f2fc51b4fefad47011db0b02371cd5ee1c78796b37756cdb53c5c150104
MD5 7adead5921c0f028c9ecf6a76fec0373
SHA1 2e668e3b279092153fd50bb60d7db0bef8d2879c
SHA512 eae872539a75bd18a5075500fbed3e1de1bd89b46174cd34d6a6f6aec07235ca904ad6d7d265fb407125112953fcfe0c965f6d84fa652e8df77ab595b21dc1c0
SSDEEP 1536:hU9B7xwI6/pD0OdLsc3ha3qShCxk+bApJLI+pLz:hUr7xL6ZZAc3ha3q7xk+bAptHv
TLSH
T13B5302B578C03C1EEAF62676185600820123764B246F79D06B051234AFEFFE77B519A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 72KB
SHA256 64e006e29b797b081fd55052037613695818ff7dd221536402900f7cc380ea01
MD5 ad73f65eda8a34d2f8f21c33f560ccd2
SHA1 d54283f91a8b77db68924690e3b3b4a671b9be54
SHA512 6b692c70740a2c7f6af891db9a5f67cc8fbfac964695eb8aee5d924c6842746804f4f336c1c64be1a45e4be9872d08354b7ada9c1f4da3d1e80383bba4446f3b
SSDEEP 1536:iQvpNhY10/XXNi+6RlpG7BYJcu/Ijw6Q3vOZ4iN4Vlyb7IVr:iANhlvNP6RzKuhFOZR4VlyPWr
TLSH
T10B73029194F85BA3D3AD3B7CE1AACF1107D88E877EA346E6B2CEC81141B140586E391D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 128KB
SHA256 fe20c4e52c088139acb5d099348090eb0cb010a543872ff364ff5aa41aadede3
MD5 a082b8634c485274ace63b195a1b0f95
SHA1 99fb5fd0bbbb347d58ac2ae7bb05390bf1efe4c0
SHA512 f4e1fbdcf7280ff7f511b7d60d80f3946827f470cc8910bcd3e056756b1c872a93ab07d3b214b2a164a9457d5ebda80d3dbc2221269af131ecbc38e99b0675fd
SSDEEP 3072:0TrPGA9fgDBeXGf8jaNL7t7imgkLxLP7ZuohfUkmrksUNW:0TrOvUGjfFdb9HfUrBUW
TLSH
T19BD39E68FB8397C2CF5B6BB8F43C2E330B4512D635C51E1746665C22A5C832AE60B65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 256KB
SHA256 66e6e211d1e357491f93e54918d9c19378a55502f6c18c6ca3c9358c7314cae3
MD5 a4de599899fe7c867999d22f968a5a0d
SHA1 a09cef62d8fe44a5548309171cd54f70e26c253c
SHA512 e941a6a2e2289f15af2023986bdb2381ec2be10a313bb920bd365b7bdbd7225e7f59e2e1d1df68dfa7a132e86346471ffc3c9ccf648724ddc41e496fd9dd5175
SSDEEP 3072:Rs4TZL8Anp1T5RLQSeUZRsYFWadyP4v9WUw0o6yed:7Tt51TfQqvsYI/09Wzh6t
TLSH
T188448D75FB83E782DF931ABCA03C2E331B9511C560C5490B4AA35C21919CB75E71BA7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 256KB
SHA256 058eb9674b820893fff9e55cfe93bd695bd889d05f0f90334d3b989715777d83
MD5 9dfb182f3c052fce549551574c7b340a
SHA1 0c3678063cd5bb8bd5bcdeee48f0ef6e7e010dd4
SHA512 64212b0e9cc7518893beba3f2df2dd5a5b228c1f267f9765ef9c5ae328cb7b7abab8f3dcd574aebeecc543f2ede018b5e69412bf57cc840dfce9125b97e1f9c9
SSDEEP 3072:kgfDA0xxnEw3BLm2IZ/TD50hJlxfboz1c+mc/a9tKcJ7K:k70xxEwRMZ/ulxTslkJ
TLSH
T19C441674F7C3EB82DB4326BDA03C3D731B9401C5A1C5591B49A39D61A499B3AE30B93E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 30KB
SHA256 331c61c729a54eda48dfe4476aba82e40e59f9af6f39a40388f01b7c69243291
MD5 e96e20e23f87fd930fb2c16dd8a96d4e
SHA1 d9e5dac964d9b185d4ab468acc342144504a8fca
SHA512 9b84cdef6c4b10c797afb81f2434d47dcfc501873bbc7f63e99dae6b805aafcd1247f48d9648e92471eddfb768a118dbae59128afcbd5642dd06fc9dd5eb61c2
SSDEEP 768:D5vUFT07+T7Q8qnoNmSC8HGiK4W3gqcGnNNJr3ehPaFrIVd+EI:D5vUFT0aRqnMmD8H4wj6NnehPSr4+9
TLSH
T13DE2011A43B0F013058E2D647204A9B7B321D85E5849BB0B2F64BE7F56D267C31F9ADB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 49KB
SHA256 d6968275b73a0ac7c052e9cc31063dfb32a5c7a0a50e79fe70119ce3d14a3566
MD5 d9e4d5d29c35354d9aba11ce10bf9b75
SHA1 eba717b926055459b6aed27ad1d40365f6b7cfce
SHA512 051a2800f88f94e5f91512ec71513e73282b940dcce21627188a08dae7c32c731b71c3290fc0786532bce1e6ec65810f6e74f2bc6c2626fec164c1a08e58de58
SSDEEP 768:waLi9J3oeedaVlg0dvVFDWzAvaEaMzp5Kiax3F7sY+XIE9SnsU6dERlB:waLiSQlgYjKzAvvz3Kiaj7sYmTUf
TLSH
T10B33F130D26C53EBFF0E9AAE80432E9528C29AF2A1151E50C0D437DEA7867F9007DE12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 42KB
SHA256 4ab37179ce919328e4cff128650b8bbc58d9debd91207c2efcf90cc053189ce3
MD5 5df40874e5d509254e55075c8a3fb150
SHA1 20d628050b86bc863117ef820d853c66e5d3afef
SHA512 ff0c17c3dd2beaab4cae51bd6b8967e3dd0256dc7f155780eec7a2bc5cec772e5b8d3ccc335b5537ad47bb92e0de278b0526f57b8d5986e97165a6e018db512e
SSDEEP 768:1QfXAPzjzPetWtVq4PXvuI7c3/ri46RFEPSPCkKgDgdad/B5a/uIikhlRYnZt0HV:1aXArXmkDPXGI7O/uBbKwD4/uIiAlR51
TLSH
T12E13F1A90F816CF0E3E98879103CF8428461AB6487117F6B286F459842FFFF979D5982
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 43KB
SHA256 511bba63fe325a9dd2d2e02bb0a42f2390d55b54f869fd29bbe6829cae9a4527
MD5 49edbf9c8e44b6c38c0f2c6be25ecad9
SHA1 20cce78006ea180c08693823b501a5ecd38a32de
SHA512 9a3b4fea2b6a5140f16d49e11a71aaca6394ad0d46cf72a0335ff7f301dcc6952dcbd9966e4d0a1ce9c10c37eef0f402bf94ed44c0e8ed993f24a308ddc69a85
SSDEEP 768:+Nr5MBQaXJhKaMebqKq5wiFDd5B1ixtv90GMTvnIGPz7gSkieLV+/CV/1mnjRz9T:+p5oJhKdgqD6yG+vnIWgxieLA/8uz9h
TLSH
T19E13F1D24F096ED3A9A81AFFB1C5DD7092A3AA1BE131104C56CAA5B416D3B470D0CBF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 39KB
SHA256 b05847904e965e8a62eb81e89bee907f7cf9754c343cfd863c0716ad9f5fc829
MD5 be642fc9e07c61790bfbbd333f7e97bd
SHA1 16b7cbb3d43fab0afad552ce5270f4ac23ede523
SHA512 9c076f1e820aa294e2b3d4bbbd7bbc996c171f3f0e87b2d4788da07c4cd124d8f04e75af8109c4c94457d201cc8eab552933ad69aa8b6ac9a54393cde727944e
SSDEEP 768:/7kLPI047b0xElqhWS0JTfLbb/d+SmV2r8zePiI9RJg:swZ7okFdbXwY7iIq
TLSH
T1D403024D3585035D3621431427DBD15E39B8F4B36EA0E5196E7819FA0839FBA821D7F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
Size 16KB
SHA256 c6bedeaa35b1d240001d4d8ce9589cf94a747852d87bcb0a7ed413517a04ee07
MD5 e972ec2a2c7ff01942371d0016119c9a
SHA1 c47768fb49126ea0a0b9125fec282cf133bfc320
SHA512 8ce24b22e5c913102f8661f3c1889659ca18c9b79e866c17264c5b7bdce8647da4ee084c1faf91eefb0a21140532833c76de5744699a128f4a5deb7e19a1ad68
SSDEEP 384:NYhMeuraSU3AY6Njkavv2lYC96gV4AgmQkjK636sM5RTZ:QMeurvZY6Njks2lYC+Qj738Rt
TLSH
T1E372BE624F8EA74BC8F8F77446CF3C9A37326AF554950936BE4A931D240D3460CB4AB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
Size 54KB
SHA256 7d3efc8f58007f77889f24c8761741b47bac11a9f3cf402f5251c63be45aefda
MD5 9c1439e81ecd8f5ebaca4bc976ba492c
SHA1 50312e05f78babd2257426938e9f07345eda48d3
SHA512 8c20465b54a3e3889f06a65aa3289ac3ad74124e3dd31c2140b7e01895365032d7f6a5187fccae6a7dbcc31fda072cbeb911190f57d52af57ff4cba3c92bbbab
SSDEEP 1536:hRgWhopogAiRAfqNnrUK9ijajXAtcJcuHx:YWEogAiRAmf9imjXKduHx
TLSH
T1F3430290AC3D52ECFBB7AB6A412A5B411ACCCE2452D12D178FE05D02B4E44F2D9B0E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 16KB
SHA256 454d6e6f37852a28fd5c57a91e8975d8b667b3f7ab98d81f12c4c9ee9035a927
MD5 19bbf27e0e75c63a7f20e2768b86c398
SHA1 e429c8e100ca9bce18bae304f94f793c8355d45b
SHA512 1f011509e277f283e0e7527b4a35dd59051aab844ea03b3e3479172f974ff1250be6087d06f64112b921a6bdd916f10ec7b618b3cb2e5252a953e078ff8cb97f
SSDEEP 384:89biA5d9HtBkn8V7tFqm1/Khi0nkdJw8HolmfiQT5maNE:8/f9jknY1a5nkc8Hem6E5BK
TLSH
T1EA72D1A24DC9013666E5A4B9874E7C1E7FD98B340C4675CC22E3B4EFABC263B365500E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 21KB
SHA256 2f47925e7f73a8f12acf899df1fc69a2559f54e3e8ba983036713c3162eeddc8
MD5 3f6c78a63d92efacd7d417e915ac596b
SHA1 4779d9571d48d15d0b03fc6c85dae0a38902d257
SHA512 7e75f70619ec8f4ad5fc9454822a6219277592c6896ffc0bb6f4ab2a6a005b97ec7886841cd81f1d0028eae627de36f47b107ce5aa8ac3e78d2254852e3d1638
SSDEEP 384:d7SVuyETJyIotCbjXQZBo9L1VkUxWU2U7fCun83QNyIa/YURVOOL0o7ipQ++PwqQ:dWdETYIyCnwBoh1AVUWunvOfK+PwqPvw
TLSH
T171A2E06F113BDFEACE51566C1BF113E17654A0083E913C4E20CA12A320FA2A95AF21FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 20KB
SHA256 1acbcc6b1dcd54cceeee7720c7887b611ad125d08f493a1b959e6e89103eca56
MD5 86de4c50a02bdc588828a5e04f1a803d
SHA1 a60662141e25139c52672cee2b4a651322a6cff4
SHA512 2a11f03e3d943899a541fb4e7c2acc79a8ca8e957221bcd6f364c7ddaf410d6d619912ddb225603f01166e32891c9075f5b68f38568982494294fffa31a99eb0
SSDEEP 384:LlS6UlgWC+o+vXlE8TP/5xt2E1eXQL8nusEDoz7ANDsVTUPGkkg9H7a:rgzC+nv68TP/PmNn/L7AND1f9ba
TLSH
T1BA92D0BDEF751EAB951BBB8359BE9E94733322C2213A63514FCA14E5724A078C3C9120
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 23KB
SHA256 0b7b529b80742d59862a4128b8a427ac364f2a225b1268ca6702337b0ff56728
MD5 62902f7c1c12541229cfcaf2506474ed
SHA1 71db84dc3e83f8c4d8217352d990e37d9a718f16
SHA512 67e80e8e16c359b583d00401b7e5efada4a4d41dd9d7ab0c412ff0d4bb5ebcd199ce2eb369940b73170bbbdd1ac567440a91832eb7be8b445bc4993e3e5d2284
SSDEEP 384:wv/ZA1yjOUKzdt8aaDU2+mffQABqg8u/LhrcGNmautAx2oqFTiKbtfuzkFFC:wvhA1yjOthMPxv8u9DaAcTiKwoC
TLSH
T1B9B2D0F677BEC5E0BC7A56748A03AC5794AC1F2A022FC058E4F16312DB0DF17A93A185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 504ac10f37c4e964e74e9bf613b06a3e5ba7345ddcff31f94c91a658983dc1a7
MD5 913fb1c54338075cd04bfffc47025d65
SHA1 2fe95b91522f3982b4099a7e8386c45140fa8833
SHA512 778a5023942fd147a566dec9f8eddc0f9dbd4d1eb3e99d90414a1636aa5f3f5206d728647bc50f5a164cec1ace311c7d05bc266fb93e5ed4ab017d8a1911e824
TLSH
T1C7512AB1F6E974C1FB5C903997E001933F34B6C296B32E4A1EE4DBB459CA70D801038A
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 74fd3c27afe4db0f6ba943a0a1ec67b6cd3eec0b7b488897941608bd0542afa2
MD5 408850e8f0395478b5d35ddc34977030
SHA1 986be29dcece21527e0228d66f5315a8e7caf11c
SHA512 d963d190859e2e1b486a0a98bf618a848fdd1b662984f7d870f3ffaa947ba3a4b144628cf9e97baecb3a2229c3ac523deae8bf10abd81656ce8ba7742ef477ea
SSDEEP 192:ZqBT/Y6hVNts1KCin0HZMCFB5ew11ZxVMd1Ub:ZwT/YSVNcK905MClpnZxVMd1Ub
TLSH
T133E1E9B1B0C464C9FFB905740FE048932A77B68185A31F4B1A94D6B87CB37EE5175385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 03ac1659d2bdb5b586e58c8533a102fb7f1e4b66db833aaab5dd2ff7ac0895cf
MD5 08ffb7b27a3986199bd1e0a5b279a4f9
SHA1 2c5c18ce061f2d9280491f6946463d7bf4e970d9
SHA512 a0cf48215fa8ae471ed32c35886342f06c787501f77a117bfded8982df90c990ee9792a9815d0f5a03945c7e1441cc87bbaa1cf7141ed1ba346f460bb2d8cda8
SSDEEP 192:LOIPWeERFmBY1W1GCi7eHZMCFRvIw35Dl9Md8Ua:6wWeE7mBY1oG9q5MCTPJDl9Md8Ua
TLSH
T147D1B8B0B6C871CCFFA805395FD00A932B74B68041A75F1B0E94DA787EB27EDA155385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 21905157058adb18a9f22e38d8c766490a23950d71f7c19f43a9ba7ba118408c
MD5 ef15e50618a3d30b7d49a492a5b4d04b
SHA1 65339ac4fdc730f716b05d80da03ec74efd98fce
SHA512 fc9493f033d0f4a18378aead8f82242f38cac978499f51c134770fb612c3cacfe2264a07bdadc9619dfb1183c85b932a0e9f9cf48be88a884dbee5e53fb71eeb
SSDEEP 96:xdmRFR3KtwrHZlsC2LYppLmxIdMa2PIusPMPHl:yRatwrHXsmTh22P4F
TLSH
T187B17470B6DD71CCFB68093A5ED006A33BB4B28141A79E0E0994DB74BEB67CCE110396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 3705b1cb99df71d776ceefa446edddd75a24169dc4ea7a184be1310fafc5dd92
MD5 ae23ab47d0098168751a4551e6898479
SHA1 8292a1abdb772f3bbcfe1f81726773619340136a
SHA512 7bf98bda651638ac747d2edf7c9668c37c3056239fa9ef977e49b01f7582f26a4a0d04ad0e71e9a27f2099b87a0a1972497897fa503887742815636fbadced48
SSDEEP 3:MsEllllkEthXllkl2zE/lTbe+t:/M/xT02z6t
TLSH
T19F4404147FC00407D50051304455D3501370F4104F1357C3347104737CC77C30C10504
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71f5247b-ee50-45c4-9409-5d8480f6778c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\71f5247b-ee50-45c4-9409-5d8480f6778c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 80KB
SHA256 df203e2a09ff2c86092d0be95d5ddf94494d85731b011b92a70c3040c174ed90
MD5 e3911aa83e9dfd268e6f67d16c465d80
SHA1 c6b64a34dc1c0746625c2afb57208d1fa8a3de6f
SHA512 f8678e1b2f401c5f6afd9f1eac761be50f142e562942ffaf12c13fd0a9d9dcbee0d2920baa9e6d9e2e2a0194d4f753562016228c72c551747c29695aad84a7a2
SSDEEP 768:ranhna+JCYpkQb4bhkoA8FKvrtlh6OV+8CYdkQk4m2xo7hwKvEtlh6:ryAYbDqdAGKvrtVVvDNm7qKvEt
TLSH
T13283E0BA87092AB8FB245F7E945A8DC018BBC059D4C9D40DA947F932EE4AF1464740BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0
Size 44KB
SHA256 634809747b0cd082fe6d1fb535f1d0ce3e958be6dbf3ee614f3596c77f240be1
MD5 4b3c6c298852c6dc6cfa46a1ac335f01
SHA1 6949bad0260d83e0c47da37661a83afcb5ee9a49
SHA512 1efdf7a8c02e80a011c649f5f7b99acea31d83325fb6cce4c50854ae7c41b3e137bdbc5fdac611745bf020362fbdb3d0f786a6abe0c58c251a830182f80f67cd
SSDEEP 6:/Fii28KlUkM/lkehowhiRMQAax/Qr32tzQPVeOKcJI/:d9Kl9EXh1hiRMY+i8PV1K4I
TLSH
T1D513123DD7E0244BEB1CF6F4EC485FF51E71C84462B203A60E272027F8042D3098200A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 58b4e0eeb46382ec907fae40ff5d4313967ad4c4ad2ea90e03a072e6802b9437
MD5 eff862ac7d9e4261223b3fb06e7534b1
SHA1 949009047cff4c6556b9955a553da2a1e36f1792
SHA512 888840e77cb1905cfa8adcf711f94cf9533b36dcaed18079d23cf805d624de4b5f3a7e4df7c8fd394050151cb026f658f59372ce521a52db99ceaf866608245d
SSDEEP 12:U/M1wthXxpzJW26ioX8GLpzJW2MpdvspzJW2NZc+n5pzJW2nhob9KbvQpzJW2k:JwvV2T8aVeyVvJn3VL+MYV4
TLSH
T1CD448B23B8540C83F536C9B1FA326EAAABBC91C9D2936F5313140169A9B18A58FD5584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 1e63ae5281e186cc5f3b237e746758cbf3eb278472cb99e0e635ae6eb6e941c2
MD5 c20de6157fe82e203092a3ddca69589a
SHA1 727d0e42ed5fc2855a1b3a98bb7f71b854db26ba
SHA512 6b2effec4371dc0c8c6a357daa654925d0bbd0bd51aeb83593ec8848bdf80dfceed70148ec03cc933da5929b142bdeec8a1f2f38cbf6ce1816defc2526e4c0f7
SSDEEP 12:U/M1NthXxpzJW26ioX8GLpzJW2MpdvspzJW2NZc+n5pzJW2nhob9KbvQpzJW2k:JrvV2T8aVeyVvJn3VL+MYV4
TLSH
T18A44DD23B8100C83F536C9B1BA326FAAAFBCD1C9D2D36F5313140169A9B18A58FD5484
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2
Size 1.0MB
SHA256 3b8ed88cbe33add570dcb000d9db8ca4476550f46a870e22ae5942515af30bc0
MD5 3967158e41d11567e19c6734753b01eb
SHA1 74170f5b022aa0b1b6d184ccfeb9e395409d07dd
SHA512 a2537b3eafc851e7c8e775591ba8e05dd173829100b3ff4f64daba2846f77718e70b4e9700b2c1eb0c2ab6ea1f860d25d1cd2e49ec413d1cf7880271b4803575
SSDEEP 192:MdxZdCEYENlyZysnEYRwymUWLTgBPl/E6Fwlyp7L3sgi72jl:4j2ENlQdbVy8bsG7LViC
TLSH
T1BE25B0F6769207CAE28AC473243614EDDE3717278965391D890901E5B7CC3469E82F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 9b8509a53760566f5dc68125eca6a80014079e49bdc8c7a8303fdf50083e6e81
MD5 096e4be3f3f8a6661aaf9ec8f68f4b71
SHA1 5a7c063d9a33dff33319f7a5333a54016f7fefa5
SHA512 8d824b7bc718daddc9f4ff15ee2e424117596eb2fccbf58be99f4aedf46990eb3b038d5390353f82fffc0ce2e8f8c68f84e65ef03a9c28bb042757a282c88a22
SSDEEP 96:E4NJ7HcdodNfEFMHqLAIU+bGz83uy3+u4tgp4DLjGQLBze9z39E7Klcd1+dGL/Qg:vSOpf+G83uy3Ct7XBBKihcH7DXspU3id
TLSH
T1D714642F2B352751CE7D527638A6565ADC7EE02BCF832689787104B0CFE3662605C86E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 5KB
SHA256 0839ff92e7b8fda511da7e22e4b3c35bd5d1e9de1883f9b72f6d69174a9f1bdc
MD5 7336803122d4e6bfd1a2fe0a7abf3275
SHA1 25ecc5a755af775595149dad3a36f1cb59c52f3e
SHA512 edcf0907d811e44330b53c3a175e77ea33303309ac3f6db4ffe8c76522ed552341164c85393014518de6be2a6cf749d5dc4a06c00d6e42acc32c6de0ca3041fe
SSDEEP 96:ocyWa5/LrV9nzBmo+KeYYqWuJ4RqmwvMsB/18MLQJmPCBjpnHpQ8m:zla5/LZ9z8oH7WO9vMk/1DQJZBjpel
TLSH
T15DC1BD7333829CF0EF7481E47A90B9BDE82F502FEC446AE9F4915E4442904E5ACB061F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 0e6ea9dd482066817afb98b09bfef7c43210c2115f24e780bc85551014ec26ff
MD5 f9449b06f3f8aa1605c24ac738b25929
SHA1 ce72b6eff942b2e03f9fd9461c56b922944d46dd
SHA512 ae948299629988ed216708a688d648f8597364bd9d6abe34345e89ac18870a34c2868ec5314b51b5f01e68e8f85202c954f10370643067684c9da958d54bc0ce
TLSH
T1D0E0DFB988DDC12E6308204B632C770CCFB13817E6C4AA066B89D940F80A444A2AA2D6
MD5 SHA1 SHA512 TLSH

Submit Download

0737b14e-dbb7-4197-94cc-45be19fe1b25.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0737b14e-dbb7-4197-94cc-45be19fe1b25.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

43e12016-cef2-43a8-a4cb-7041ec3f75a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\43e12016-cef2-43a8-a4cb-7041ec3f75a0.tmp
Size 3KB
SHA256 da6c34e5b6289137f88107cdcd54b7b9c423b5478602166d949e1fb8a885825d
MD5 9e28126a0db337a940274e4e1471fecd
SHA1 3697fb8876a0a665f25c87d902ce55c8391b5b1a
SHA512 0feaa41559fc79c81a2f97db40c9d57ace59a6226c4a85bc78f176e9fe0dd7c8ae268abba684601e977b79b6862fef3d454048a97313779e6497da353fd228c9
TLSH
T178816E67C6BFB57B302E8ABF1D4478051EBAB836564170F4CE9782ACB0C58F30716466
MD5 SHA1 SHA512 TLSH

Submit Download

50d498ca-2fed-4bcb-9118-a2850686bfa7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\50d498ca-2fed-4bcb-9118-a2850686bfa7.tmp
Size 14KB
SHA256 bfaf428d67a43552bb811193b4d5e512b383439f5ba710ae2ac21fd9caef702d
MD5 a2bb5402abdd66e3a33b5b45bd022870
SHA1 c7b126a82649cb395181735b8044f87a5371cdf3
SHA512 2c777d36eee2622b574891eaeac61c456e03a1238ad0ce181f75919f30071c6b654e202a186f41ea4fa3dbd5e194f3613641ed1518223c4bfb7fb98688b45d98
SSDEEP 384:DWehj1NKLPzbxhfDewu9Ee2PSJFJVsBPpT/Q9X/9G3Ud0kMX3XutbIAoyKCsQkhz:zbsEunNky7Zme
TLSH
T1D962ABF7C3F9866EDC1162F0AA247D17CE5D1919422C3C8B85D5EF0B97E2470E291A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69081de5-1668-4f70-b1dd-eadcb03009f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\69081de5-1668-4f70-b1dd-eadcb03009f7.tmp
Size 20KB
SHA256 8ef1de50d824ca9461df38044cbfac74472a45ba9aeecfdf8efdc633839b1ed7
MD5 1d052aa61c27c4e82b564ece0b0eeb9d
SHA1 efcba1496ad15bbe45a2c990f96e3b7b1727cb4d
SHA512 2420464175ba557d1c47b704953c991443b4ea8a59fb55e5298f666d6624412da6609711150186de68570f876fb760be44e50de85f007a230d9807676ec417b0
SSDEEP 384:DvxuysgJKMAose63ebloPFlPbJhJqzBe+TUqppaUd0kMXdtbIAJhLiK4o2dlzb9Y:crqUlDsl8xoix/
TLSH
T1AD92AAF783F9862EDC1162F0AA257E17CE5D1915032C3C4B85D5AF0B97F2871E291A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84adf77a-091d-4b22-a508-95184428edec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\84adf77a-091d-4b22-a508-95184428edec.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cd8626cf-555f-4e53-8bf5-b636f18082d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cd8626cf-555f-4e53-8bf5-b636f18082d4.tmp
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

f14e2e0b-16a6-4917-9620-ec483d26bb68.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f14e2e0b-16a6-4917-9620-ec483d26bb68.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f86d57a6-8a49-4496-9a59-f6e177fa891b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f86d57a6-8a49-4496-9a59-f6e177fa891b.tmp
Size 211B
SHA256 2b5bc0e35320940b35e34ec72b17dc2bb37159b8addbb62e37d8283c8371a384
MD5 a02d7df5fa5bb44acd685d988808950b
SHA1 fe3e4ff4abbee2329c374cfcc8823c0bdf96e9d4
SHA512 2eba242ac887be291a5ffd2361ecde98dd878385d26a1bd6910c938328bafc80cf65ecbf5408174c0cd87281bae6d348208a8a7f98733fd4ed1a3c3a2168477c
TLSH
T157D02333130C30B59D9C2D854055FC8FC76710681841D9D410D794A8053146C4657541
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 22254a73505f746554d2399324e8a4c3b32a26b249485f71886293c79b0cc3f6
MD5 1af018a40b0684ccbe83e29a72cdf862
SHA1 9f97d9648f2ce7ac6d964b185c2a3eb91057599c
SHA512 6f2049d91eb3cef5986aa4fcb642d84543e71cf82229b0b186499942cb22d2f3bf403f151560a58499b3ec7310cb3c1dfbed47a80f03e2fa8488c729e94641d8
SSDEEP 768:iUKlm7QWvUYm08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/BroHk:iUKlm7QWvUYm0u1ja8/L/E/6Hk
TLSH
T1D4C2FB3B640CCB7E4FC05A9DDC5A6F972EA802C7A6588D404BFA994C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\16ab426a-132e-4002-8b2c-015bc0a100d8\index-dir\temp-index
Size 72B
SHA256 c3b6b19c318c26be377269e7b82d9fe292a5b7e7d258200c0813cd4f2179a505
MD5 86db7211bb38b7dfa0acc6bc36095fc4
SHA1 b50f5b3ae50daa73d0f83bf80c3774c7888162eb
SHA512 4301212f3fa0ff640e57cc111b3898888f9dbaa10db64cbb530831cdd4b966749cc2d28a2ab2e84a999046633f1fcd23c092980fd90ded84f1b399c6fcd75557
TLSH
T1DCA0026676804001DC1352F47F96854A37B2C9101E551B07A1940044DC58DC55F5140C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\16ab426a-132e-4002-8b2c-015bc0a100d8\index-dir\the-real-index
Size 72B
SHA256 e79563cb71dadaf7a419524ee3f85bb20d8a75e443522a5822cd14041ef862fe
MD5 ff3344aa6184702566675b981af5f51c
SHA1 2c3572b82639aa3870dc4f1e42e2f66f6cb76e23
SHA512 ee86c463749660d8652c56c7a369410bb150cd083844b3fcfb4411aee156913f2c7f6a51ef34fcbace10481fa0b419b2c43c100f3761dc6f7b39b3c15fcd7e6f
TLSH
T16DA0026313C0004DD073D9B5155702621782E8122100534760918044ED904455FA100C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be978ca3-e233-468d-9f0c-df4bbf0e10c8\index-dir\temp-index
Size 3KB
SHA256 313e0622781b5ac918864c46f0bd924b1167dcbd48a6b48b21e757f519192ead
MD5 4a052acfd94b20d87317639aa35a7fe4
SHA1 4c31e5f78d46b1ccfb508f36557ab8d2ae1ae8ef
SHA512 3dea20bfc19b98e6fba74b5331bec9fe7fc572ab5849669f53823c6f5c0a06f6c5e7eaeae5763d6de5776870317a9b05baac591fdcec07dc6002356a8df5a613
TLSH
T11E51FA0E4E431B1EDCECA97105B60419377879DC6B480D1764FED538F8877281D9D6A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be978ca3-e233-468d-9f0c-df4bbf0e10c8\index-dir\the-real-index
Size 144B
SHA256 ddf8a1719db4a94e0ead87056d551550bc02f6fbaad35396c02decd66fc3310c
MD5 8bcbdc55f5844d6d92c685f5edefc16b
SHA1 883f32f27e674500928f6bbf4bdfc9b61d108243
SHA512 7bcbf41dc3325a62edc060366218470e12b43868064dbc55aaf30cff9fda43bdbbf57649fd6dfa45e1b7bbcb4d9b1c651c5aed92155058fdf4f2d1b220f93f15
TLSH
T163C012749F1BB0C1F55B857098C7517125004C18D420565750FDB0945C13AA0C706302
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be978ca3-e233-468d-9f0c-df4bbf0e10c8\index-dir\the-real-index
Size 144B
SHA256 ca8f6db0b08cc8db94ef6a2e95ff271455094b86f82c5f2fa9ff530e5882a95a
MD5 5510d03374d1f9fefa7e54a3274381f5
SHA1 5fe39d1b7c286c60b6ec7f5aee258d0b27b38641
SHA512 ab83eb507f8578b69f4251ef9882619837ba03fcdbe83a313d471d48032c255e8bd3c3465a389c5cb4cbee124715ab520586cba011912ec165cb44d5b1de743b
TLSH
T1C0C012359E113042F89E893098BFA1B2597008EEA410065650FCF08C9C11AC6C79E208
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 1dcfc82bdb936efc0608e5d4d2a49b69ce6fbce64b2d5c406760ad8f7839198b
MD5 bc51a07acc7ce07c52b686291a20af9d
SHA1 5c7307b8f3230e059345da026ca6a9ac077a5f2f
SHA512 f33843065b3bfa8661350a374a73c17d8b464416e36e1d58f59ec31b840883efcd1c66ea4b018785ab69e6b7c2e3a14f212ec8f25fd76f0752672d5dc82aa45f
TLSH
T1E2E0D8F72EF76414ECAFE7DA203254A004547848E419EC5EA42AD59714637197449C66
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 dffcd974128ac65fd001a2643cedad0ff92c8e41ba2764eb3e7fddbea20cd2a8
MD5 a17d4ecef6c39237f2171263e6fa3388
SHA1 d7dd7b5f8f44f7324bf9f2930dcb7b3e2b3090df
SHA512 ee0d0a373a3c482b64fc10e39e070723468459a7b1fcc054816ad32f76592477666b324b7a4c73e613a81e4620a5ab6cf8a8dca7a939e188931f140ce2c8e132
TLSH
T177E0DFB04EC8D17DA16A20A30225A7098BE5B427D2C47D062FC4CE406946E08B1BB190
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 cbc70254048f01d1d746e9b81606bfc227190197656f272ee9e83acbbacd0d93
MD5 0c81d0d676680486f790ae46899474df
SHA1 9ab0ee10ad4532ab1edd9dc7c23fe27db2853869
SHA512 811db0addabd32e4f5f3420398a7a4a9c6db8d6fd9d56c3aff9291297a7340b34c0996bc0a372bbf9fc0c7c6c68ad3af8e28810e52d9d74e6f7d0231d422376d
TLSH
T17DA002A08B49D141CC001B76D175A6847750889A1509172288DCE49DDED358461C6246
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 1ce1e67d282781ac628ab4b87ea2641c057d208e2ef915b10483e2d0ca066111
MD5 b8919966745b3e64407f2c8ddbbe814f
SHA1 2f15afb3582c46276755a82f035873191da8bd07
SHA512 efb7d99e7e08b1de6a25511b69e2da1b6612f3e3988715887fe6a8d4159a8d4a0e3f1949701501a3ed3b3d4d3b39f4c75aa7db2af0831dda58fafaff31061322
MD5 SHA1 SHA512

Submit Download

Tabs_13435412805366609

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13435412805366609
Size 3KB
SHA256 301fc4fe3b1270f0d9406ed2eb7ae09e932cd10770f2f39a4adcc63caa0d98f1
MD5 de0b980252aab94192a1792c1840ea99
SHA1 91e7c997864a218a59676d2341f9c11105731069
SHA512 8524c71ce5a17535b6ae9df5caec08890b266bd23910492bd48b317845d9b156d650c19673bcd0ab16c7d7edb0ec0076fd3b20ae7ea5a89609d57fcf99ee3cb2
TLSH
T11B5100377BF10AA9F27F077A1CD947DAE53E6601E8C54B8E503441641F123929DD0D8A
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 172B
SHA256 487299eef1350330e860ddb1318593cb0ae9c303eb8d00e7f0a13d9db580f7ea
MD5 157b06d2338c6d518f990046261adb25
SHA1 de32df0ff9755fd863ff8674b6cb112cd6bac603
SHA512 dbe56c5ee6c70fb686e982424c79321705c9a9ff751769472f5df89ab532b0540f9583fda1181c97833613fed546519da4853f4185f88435b2badc7312f3f63a
TLSH
T1B6C08C0477F88212D98419706BA447885330E08222724063C828AF748D5BAB96E92DE8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 1b7014200adfbb0e15f27d0d96ccf550be0810dca2dbfc64bbfd6cbfb3acadc9
MD5 ac2019ba0ee87320460bc1b58fbc5f82
SHA1 b0e343c32ce18ad5897d12992feeb27ce72d5997
SHA512 26dfbe23f3d0926b95abd26721dfa1be4558528cd58956a845903b5d0ce18eb4c684c6dbe7c412abb18eeefc2e325b46867aa068e0000cab0681179a80d6eb36
TLSH
T1A7E0DFB05BCFC63E624A348B1324F7098BA3B413E6C429567B88D684A24B940B68B290
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 c39a119a5f4b43909bdd0b62ee66975ba9434078102ffa3e3e23edd07875606e
MD5 c3caf33a63f68bb612c9325b34f38c58
SHA1 c00e655a3f5cd9c2b06f327d5d08db69c21796ce
SHA512 1c46e51ace55a1ed02ae091432600e98f0f9fe51b17d611316a066d0aae5392faf8469b2def7ce14bb05c9252b85cc4099f621c8244c609e350ddc58434335b2
TLSH
T129E026F08EC8C63D510A70A70364BB0D8BF1B817A3C17A4A678CD840AE02A00F2BF1D0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3906096c7a68814e4a69b8091876ed34e0a8866fbcf826366e1b583fa9f80e95
MD5 8d2f70bdedf7e7d969db081245c2106b
SHA1 0d84860d8431c762dff1af7924689f540f3906b1
SHA512 28140682cf044f9b56e52dcfa95a28699c39b0c29680ba0611ab9ffb301ba72cc387ccba1dce76c3afda5f8a080202a23dfce9ca272008cbf1ce611ea96a9cee
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGuuyLb5bIbVbpbzb3bLbkbb3bSbPISbBbkL:K4fSKcYwKOoKXqgjuKo86N
TLSH
T16591320176BB4601387E7949A675866B428131F33068E92FBFBC90E14EAFE044DFD6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

c63429f8-e3ef-48d7-b558-bea10f449e28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c63429f8-e3ef-48d7-b558-bea10f449e28.tmp
Size 12KB
SHA256 7f7fdcc8fb4d257243c8d7dbdac37f093fead121fd25e3315e6d454795f5e536
MD5 7cf184d1cc8a209e768f989380428810
SHA1 54e90aa50601d5d004f2d1eba5b5c744d8ed991e
SHA512 fd0682d039cc08fa150c6d20b9e3071a8eeeb55e2e971d320035431620544598b7aeb4e5187bdafc1c9b387156c24b2dbf0184f2329f8e98e25c82129cd5a815
SSDEEP 192:sxZzRTWA/fYsnWpVK5IdpYh6QHW6+WN6ODRn+V6/Y36xx6VZIgb+J:sxZz8A/fYsnWvKSEHbt9/7ePu
TLSH
T19342D852697469BB8CCBE20FBA15BF23E6F9503251D11E48AAFD8D1C01E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e67afb92-f493-4cd7-b167-46474179c21e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e67afb92-f493-4cd7-b167-46474179c21e.tmp
Size 27KB
SHA256 ae03dc5368b75366e92c10607cf7d2c059eeb3eaa8b9bb1e5d01cca7bf94713a
MD5 6c076323d3728e41d79fb3c106a5b0ed
SHA1 8facfd150ce9265f20b7539ec2de577cf9b73555
SHA512 101b8cff7277da979138aab0358e092fddde079574493e7dbf1aa39457f8aaa1d075c4aa4b0be5000c09fea150ec0e526787e40702181bb14511e1188bd4ba41
SSDEEP 768:iUKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/BrorR:iUKlm7QWvUYe0u1ja8/L/E/6rR
TLSH
T1BEC20B3B640CCB7E4FC05A9DDC5A6F972EA802C7A6588D4047FA994C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7359c89-4f0d-4712-9aa3-29daff74c426.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f7359c89-4f0d-4712-9aa3-29daff74c426.tmp
Size 18KB
SHA256 7c3300d2ab3bf5c70b562492c67154dc83dd7f7d013b54f0f246437b8e210196
MD5 f2c0a50d3fe562778dfcbab4b532096a
SHA1 c580b59445478847bacda4fdb260dc0cc2df4473
SHA512 5082222a8eec250df98d430b70e6caade54fd60f196e1fe9f16364d98b820617321fae00e1d319a435b47ae4dfab5128f1c24933e2e8967e2f3a5f40e2635349
SSDEEP 384:sxZNDeA/fYspWvV0IhA9HbA21/dweRCG5U03PkfM:sVeA/flYV0I0HbdEfM
TLSH
T18982D852692499BB4CCBD52AF934BF22D6F9112299914E5CAAFDCD1C00DE6ED3203847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 140KB
SHA256 b0b179ad0ba0980fbc14289d3967fa0ef50832f1c94868eaa29f31432376cf50
MD5 d24b94dea08eac5005d2bd354feb80fc
SHA1 b597f647de3e009b28094ea48e661d66255433d8
SHA512 d2513305b55e62d628ec877a2b9f07af26fcad009d0cff67515b6f9de1dfb250adef71945264d2b4c8d5dbb187d568067447aeb69a4226a7166a60b6a025a1fb
SSDEEP 1536:KyJL7D0hwUg39QE8Wuiq9sdEwnSG1qtUO4YK4haH7RguiV7:rJL7D0hwUg39QxTF8oG1cJwed
TLSH
T175E385F72857F86EDFE99134743AAE4DD477C0128614E8D8FA3C049337B842939719AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f280375-ce96-4535-a100-be1e7bc9f447.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8f280375-ce96-4535-a100-be1e7bc9f447.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b2f9d696cb5d21ff49b78e47bdcac3deb0f1576c252a6569071621c83a641ece
MD5 0a9d573216643f50a5b5cf6a897134c9
SHA1 32ab70d68f95f7d9e1351f892d9c444113109202
SHA512 53fe5d225d24ebddc0a525a9e7105da27121708efc93d1e55e984cccfc450dc54594741e50b459fdbb68d730fd0418b35f75743ddc41ef2577896577f9b139c3
SSDEEP 3:MsEllllkEthXllkl2zE/ludkVX:/M/xT02zfel
TLSH
T17D4402146B800446D5041130585183901370D8100A12574324A55422ACCB6814C04040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 94a84cc4c09f06297b275a3d76216a11c4d0682bf218041b93c5b05a5179ecb2
MD5 de5c8f051d5079c8a40251af06a26991
SHA1 6ec4beddf906bc28324e0f2ed91d1eb9c71d455d
SHA512 cbe9c0bd78a6c0de8ae4f20ce144d606eb3f6cf63ff352931b1200f2892d08454d084f21adf51289966b208fa3cb102471eb4a4c56c32b1d5cf8e3166078b7ef
SSDEEP 384:OiFEZcIXMsN98TUNTUlIlWwHpADbhoph//2w6xe6A4tA2COfMKwIr+7tgOIwZOyO:lFi8ewgnn/4xq4zUKwIr+7Xs/6af
TLSH
T1C6E26EE188D75CBAD4AE97C3A77EAD02597CC133B5845548B3E9692CEC8B0BFC306851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f2e0e3741e459318ef712e8dcbd9b6b80bb4df97a8c5bb905a55bf598825cad6
MD5 1de3156ee5a2432bd0e53649d47c69e0
SHA1 05bb2e132e159ce52d2dd911dfc9b96cdc8ad453
SHA512 640d5bbdf9496ec42c151d149625e9df302eb2035881dade7af0ecca9c95b2c004fbf78d85d1afa29b3bc00af468805a27b937d8fa3b51eb240f3e6ee6ef0279
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 fd89e85309e9cab47d216c9c0100990ba5e4d2dcaac429bc60bbf43e14aabf20
MD5 7e5bcff7b4448277bb3296a5797e0216
SHA1 471304370253f06607a8a04fa447036936003b8b
SHA512 144938f3179d4a4f4ef05e4c1067caa87e93b52344d51bd6a25d2f3f30c27ca01e9ad470f2cf9fec9312995d7bec2cc6a8fd3f02f42b6edde672255773bf4d11
SSDEEP 3:MsEllllkEthXllkl2zE/ldV/:/M/xT02z0/
TLSH
T1C9440414FFC00407D50111304551C3501370D51007135753347104337CC77D31C00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

b85def30-d687-4de2-bc02-17cb5e97cbd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b85def30-d687-4de2-bc02-17cb5e97cbd5.tmp
Size 18KB
SHA256 fdaf5f1730b753284a1d1eb33aefeda0d8e7e2826eb64585c13b160c4421bb02
MD5 9fc0135c7cbb1b17a5e2c2a2b2ae4257
SHA1 141d2eaffbc20074f0b39b745888a557051521c9
SHA512 7d2f99caaa675f0ce0479cf23d17b1a5c93b685c47097f22ecee474ce6a5ffddfd5d0cda7e58a72774e0724ae0adc39072513d6ae28408a604e185f99e413ef3
SSDEEP 384:+ZcIhsNczwHpADbxbbph//2waptgOIwZOyJo6oZf:8hBn/QpXs/6af
TLSH
T1C4828D316CB8AC7B6DF7A185F18737135EB48077A7C5AB8099EE9B1D01DA198130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c61d0a66-c59c-492b-83ba-55cb961bd0b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c61d0a66-c59c-492b-83ba-55cb961bd0b8.tmp
Size 392B
SHA256 fa5dc939c2958dfae81b62ab723787098559156c3fa4e837475ad5f7d1a011f4
MD5 5f12724745f193e1b116af2f257f774e
SHA1 f5edd47256431c2a1c1e51a7af7bb38400e8725d
SHA512 e0fcdbe51cf1148fe32a9b65569065c58ebf32e3fec852597e4f23e5ec9790447aa34ad1e8dc47bc4881387c1076e9f3b0bb51a0f7ed678300e38e5f1a1cf8d3
TLSH
T1CDE00142930411B9C039073081471F312BE2806101B0421A0A6005682C63A002F30F91
MD5 SHA1 SHA512 TLSH

Submit Download

cb9e4c3a-60d0-4c85-8bec-c04a3028bf1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb9e4c3a-60d0-4c85-8bec-c04a3028bf1e.tmp
Size 27KB
SHA256 84401ddc3c0e24709648891e345390ed4760334c56a0a52f6e82a9f201320ff8
MD5 6da699dd6ed47094290e9769fd688b4b
SHA1 b33703293ac3be105f230b5a01fab939ddcede43
SHA512 e69af391c45855364b879179045b9eabd949485a3e5cb44339784530a1df21549e82d6d6e68a1d0a0d5c874f504635c270a726bd1071c15e7125dcb61a5a2b90
SSDEEP 384:n5iFPZcIXtsN+8TUNTUlIlPTrHpADbvry2h//2w6vKYtgOIwZOyJotgU/7IztoZd:QFHdJwg4yG/4vKYXs/+ad
TLSH
T1D3C217F158D7987AE8AE9747A77E2E035EBCC063B5809A50B7D94A0DCC821BFD307811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49a7135c-d77e-45cd-8cab-19881271cbae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\49a7135c-d77e-45cd-8cab-19881271cbae.tmp
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

58739cd5-5691-4892-82e6-0fe281097d48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\58739cd5-5691-4892-82e6-0fe281097d48.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

dfa057c2-7e4c-4cd3-b6e1-1c0379eb0e4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfa057c2-7e4c-4cd3-b6e1-1c0379eb0e4b.tmp
Size 392B
SHA256 5f2ac6c8c0881fdc0305114db4b26e7ef67e85deb46a59a7cf6ca846d0801d3d
MD5 d5d6e758d98c1774befd8ca0b503d679
SHA1 2c19661c4f63200919d7b5feb457c5491dbae56f
SHA512 1638d4059337027777c4e48d2490cea2ebf5a9f61bf1964d38fa8bebe3b4160a3e6a0a6943db0ffc988bfeebd6c429bed3997071e2009544d47cd25b133aa96c
TLSH
T1CAE00441D3041135C01D073041431F3117F1C05101F1430F0550057C3C13F001D30F50
MD5 SHA1 SHA512 TLSH

Submit Download

ec8b5ec1-af01-43ed-8936-69ae14da508b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec8b5ec1-af01-43ed-8936-69ae14da508b.tmp
Size 35KB
SHA256 3c5dd23a77dad627ca17f113af5b94f838b99add4193d018488eb85874b30833
MD5 25f726f292324d1615f51e6227e958f0
SHA1 efda31153cde8b5c49fb3831b22506278075024b
SHA512 d0a24c0cdd6a8c89c846dacb17a7678e737274c1386019cf5251603ba131986796f4d904e5ca73f583414232a497261334b6e91c55213cbed91379e7f18f5976
SSDEEP 384:nfiFKZcIXx3sNJ8TUNTUlIlPTrHpADbT6y2SUfxa//2w3iaAwcSqxssg9dNtgOIT:qFoB3+wg/y8a/1OwYg9dNXs/+ad
TLSH
T17FF24EF598D29DF6D4AE97C3676DAD0269BCC133B1885488B7E5692CEC4B0BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

923fa5ba-17ef-4bfd-b8b0-8dbde635e4a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\923fa5ba-17ef-4bfd-b8b0-8dbde635e4a3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f9b4468f-f82c-41ac-ad9d-9b67c46bee5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f9b4468f-f82c-41ac-ad9d-9b67c46bee5d.tmp
Size 30KB
SHA256 0ea6452ed3769b398f6608dfa36f875b8d78f191a0eb8d4c8fa34659143af507
MD5 960e8039f5d5f6605a2548251b07b566
SHA1 cc4d52b9bad77e2beacae5afd79a607b308c4e56
SHA512 4e244c32bbdebdc62378332f3f9545390cf76a385b32096e7d890dc33f88d3a2aa7cb367467f3162f1f4f61aa0ebc98044d3053e6accc496dcb51bb973b24617
SSDEEP 384:OiFEZcIXMsN98TUNTUlIlWwHpADbhDph//2w6xe6A4tA2COfMKwIr+7tgOIwZOyO:lFi8ewgsn/4xq4zUKwIr+7Xs/6af
TLSH
T11CE26EE188D79CBAD4AE97C3A77EAD02597CC133B5845548B3E9652CEC8B0BFC306851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f77189215294366985755e0cedfa88e07bbdf6e6e0cb2dce2cce38ccd38077aa
MD5 f304ae4bcce88c63afead05c4d36e2f7
SHA1 7091fa08386cd5ecd490e8578592f37ecd5e0e6b
SHA512 ebc76da915aa2a20f67de6e739a80c8951eb41a92d79158b66d71da7050eacd9bfd595ef60b97f4b74e17589331b19ac0546778504dcb5300caaa9326e7c2483
TLSH
T10A41F758B6E91148F3B37F5AABF7A86D487A79772E0A945E10110D4F0A33B40CD61B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 909a126790770460b0246dbbf59ceff42002e79be9c0a33dd05814bd74219132
MD5 3f6188dc60d803f960ee7f2fe52e9927
SHA1 c3e64dd84e06d8b49b3d4e00cc62809ab69ac132
SHA512 d3b870ece54ae5ea6ce5bfcd6b9d3fc73f58b34c788ba9b37fd12401cd70e5e8fbb76ea0355a502bafe5a086acc978c35f9641224546272f37fbf142b41e8218
TLSH
T1B2516C5CA6E95059B3F7BF0A9FF6A4AE487B7D732E06945E10110E4F0663A00CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

8f81a9dc-a311-40f5-a447-c74310b29ca3.tmp

Path C:\Users\Admin\AppData\Local\Temp\8f81a9dc-a311-40f5-a447-c74310b29ca3.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1420_2070297888\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

3358d066-d18a-4c59-ae3e-609875936368.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1420_398152991\3358d066-d18a-4c59-ae3e-609875936368.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1420_398152991\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads