hxxp://kardeslerpidepelitli[.]online/

Analysis

user interaction
yes
max time kernel
689s
max time network
687s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 17:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://kardeslerpidepelitli.online/
Sample261006-wemxtsbx21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1748	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 40 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e80922b16d365937a46956b92703aca08af0000	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Documents"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{314A812D-B484-48C5-B585-091F0100972D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupView = "0"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5672	msedge.exe
5672	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1844	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of FindShellTrayWindow 48 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1844 wrote to memory of 1132	1844	msedge.exe	87
PID 1844 wrote to memory of 1748	1844	msedge.exe	88
PID 1844 wrote to memory of 3792	1844	msedge.exe	89
PID 1844 wrote to memory of 3792	1844	msedge.exe	89
PID 1844 wrote to memory of 3792	1844	msedge.exe	89
PID 1844 wrote to memory of 2296	1844	msedge.exe	91
PID 1844 wrote to memory of 2296	1844	msedge.exe	91
PID 1844 wrote to memory of 3136	1844	msedge.exe	92
PID 1844 wrote to memory of 3852	1844	msedge.exe	93
PID 1844 wrote to memory of 3136	1844	msedge.exe	92
PID 1844 wrote to memory of 3136	1844	msedge.exe	92
PID 1844 wrote to memory of 3852	1844	msedge.exe	93
PID 1844 wrote to memory of 3852	1844	msedge.exe	93
PID 1844 wrote to memory of 4016	1844	msedge.exe	94
PID 1844 wrote to memory of 1544	1844	msedge.exe	95
PID 1844 wrote to memory of 4016	1844	msedge.exe	94
PID 1844 wrote to memory of 4016	1844	msedge.exe	94
PID 1844 wrote to memory of 1544	1844	msedge.exe	95
PID 1844 wrote to memory of 1544	1844	msedge.exe	95
PID 1844 wrote to memory of 3204	1844	msedge.exe	99
PID 1844 wrote to memory of 3204	1844	msedge.exe	99
PID 1844 wrote to memory of 3204	1844	msedge.exe	99
PID 1844 wrote to memory of 3196	1844	msedge.exe	100
PID 1844 wrote to memory of 3196	1844	msedge.exe	100
PID 1844 wrote to memory of 2904	1844	msedge.exe	101
PID 1844 wrote to memory of 2904	1844	msedge.exe	101
PID 1844 wrote to memory of 4500	1844	msedge.exe	103
PID 1844 wrote to memory of 1628	1844	msedge.exe	119
PID 1844 wrote to memory of 1628	1844	msedge.exe	119
PID 1844 wrote to memory of 4564	1844	msedge.exe	120
PID 1844 wrote to memory of 4236	1844	msedge.exe	121
PID 1844 wrote to memory of 620	1844	msedge.exe	122
PID 1844 wrote to memory of 5612	1844	msedge.exe	130
PID 1844 wrote to memory of 5612	1844	msedge.exe	130
PID 1844 wrote to memory of 5764	1844	msedge.exe	131
PID 1844 wrote to memory of 5764	1844	msedge.exe	131
PID 1844 wrote to memory of 5764	1844	msedge.exe	131
PID 1844 wrote to memory of 5928	1844	msedge.exe	133
PID 1844 wrote to memory of 5928	1844	msedge.exe	133
PID 1844 wrote to memory of 6000	1844	msedge.exe	134
PID 1844 wrote to memory of 6000	1844	msedge.exe	134
PID 1844 wrote to memory of 6052	1844	msedge.exe	135
PID 1844 wrote to memory of 6052	1844	msedge.exe	135
PID 1844 wrote to memory of 5672	1844	msedge.exe	139
PID 1844 wrote to memory of 4004	1844	msedge.exe	140
PID 1844 wrote to memory of 4004	1844	msedge.exe	140
PID 1844 wrote to memory of 4932	1844	msedge.exe	141
PID 1844 wrote to memory of 4932	1844	msedge.exe	141
PID 1844 wrote to memory of 4724	1844	msedge.exe	142
PID 1844 wrote to memory of 4724	1844	msedge.exe	142
PID 1844 wrote to memory of 4428	1844	msedge.exe	144
PID 1844 wrote to memory of 3004	1844	msedge.exe	143
PID 1844 wrote to memory of 4428	1844	msedge.exe	144
PID 1844 wrote to memory of 4428	1844	msedge.exe	144
PID 1844 wrote to memory of 3004	1844	msedge.exe	143
PID 1844 wrote to memory of 5484	1844	msedge.exe	145
PID 1844 wrote to memory of 5724	1844	msedge.exe	146
PID 1844 wrote to memory of 5724	1844	msedge.exe	146
PID 1844 wrote to memory of 5724	1844	msedge.exe	146
PID 1844 wrote to memory of 2548	1844	msedge.exe	147
PID 1844 wrote to memory of 2548	1844	msedge.exe	147
PID 1844 wrote to memory of 1056	1844	msedge.exe	148
PID 1844 wrote to memory of 1056	1844	msedge.exe	148
PID 1844 wrote to memory of 4580	1844	msedge.exe	149

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://kardeslerpidepelitli.online/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ff928a2c188,0x7ff928a2c194,0x7ff928a2c1a0
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,2559672607315941618,14356701695559392665,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,10599588413726407349,1561643476986238825,262144 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,7057427248571701354,6051190332466271242,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,792968886627179970,7842518848406139780,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,15643015300506607068,12281438666298820491,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,8632224952699848666,4648519029077599592,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,5110580779588709330,5296839129986752075,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4996,i,16668120592702200525,16807148558093620388,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,4479161961971728116,8366487898154178798,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,7458068571854607914,6453344264183481507,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,118674860264636201,17140114412216738594,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,118674860264636201,17140114412216738594,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,12357679103570491352,14764672330652228687,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3416,i,16410823535038554522,13000166494123661796,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,6260122159527790711,12751040348222407022,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,17199801999555343122,12862514419567655124,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,14836950902831190695,8807004353504029854,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4484,i,2235503752055156176,5991387752809234941,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6728,i,12374013779753216949,6563383193723704481,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:8
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,18135940812996261452,5475845996808665098,65536 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:3
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --disable-win32k-lockdown --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6796,i,15327144584213916864,12261755432189176062,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:8
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6644,i,12932636854289046871,9609260858446366194,262144 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,7225521077136779705,13663073575563577905,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7096,i,12152969703072211442,4587564601221296003,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,1262630793657445314,11643159960895133207,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,2581166772592506895,18092906776233617617,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=1296 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=3536,i,4445800856378691684,16478939369293480979,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=7868 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8108,i,17107638992568098253,15320417158343114490,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4476,i,15805987148399949697,17584434442430678423,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8040,i,7123477780160639918,17480895286205889679,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=7452 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7136,i,15375013322234860118,17932190186113881438,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=3680,i,10443031023116184615,11771905974270722721,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8148,i,2261085829920629658,11136205845497483260,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:8
  2⤵
  PID:176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,4692736019791678977,9390748763777596997,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7652,i,9525980120619717335,10078563975860799597,65536 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:3
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --disable-win32k-lockdown --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7220,i,9768716671708512915,16704367232300833768,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=7636 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7588,i,13544617400906789313,10061462608337009841,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5468,i,5479602019990762802,7606399463365682112,2097152 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7820,i,14238282693072822543,15760569320043118944,524288 --field-trial-handle=2224,i,8228903842099042157,11339210716058832779,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:8
  2⤵
  PID:5172

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4744

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:5872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

13ffc739-e6d3-43a2-9517-f7ab6090b6a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13ffc739-e6d3-43a2-9517-f7ab6090b6a4.tmp
Size 392B
SHA256 50e86c4d6d46e94bbaa176810b98d120500b8d4aa6013030564743396736195a
MD5 4a664b2dd0c810332098fea3e022d46b
SHA1 b0c1cc556197eb932a84a31ee0b94a220126bf27
SHA512 7758d76991df1182189360f3334b7fdb1c991610fa965f84ed04a11f7e428b62e78b3c955890052063038357760ad1352473fd40133ee4c09116679edaf5c33a
MD5 SHA1 SHA512

Submit Download

1b9181f3-83f8-4d52-bed0-cdd8b0a6eb3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b9181f3-83f8-4d52-bed0-cdd8b0a6eb3f.tmp
Size 392B
SHA256 78023514406f2ead4de3309b701943ed6c622fcfc0e01866d4eff11202a890c2
MD5 81d75f85ca353d8ef1500312297aa36c
SHA1 1217cffc47bd90036485b1b821f7c332210cbe63
SHA512 a46f6843271cf6c38a934581812ef37aee0e6326be29352f5abfef326df3b18e55d188012f7d3d796e00636844a1755e0b3433ef83ec02bc825ec36a99c2c554
MD5 SHA1 SHA512

Submit Download

2949e982-4798-4986-8a66-647da6cc9f8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2949e982-4798-4986-8a66-647da6cc9f8d.tmp
Size 26KB
SHA256 173e702931174b326f322709def6231085bbe06b188f9de22c16b6d0eeea5868
MD5 98e76d7aaa10b628d9c81ea74628e8bf
SHA1 6fac8c9ae5eb2043f77cc2a3f543a8f414ecf692
SHA512 7c803608ef0539a06f31bfd3889d1f21aeeb61044290f2095c8bd059a4f71472d2db10c02f2a5a0161990df8872b79164a12185f86f7b0d9667f8b4e99feb37a
SSDEEP 384:BiFiZcIo/sN28TUNTUlIlIJp3pupz1pw9iX5F1VsJ5VZh6DKhH8aog:oFQUXwgy5w0aAJ5fYGH8aL
TLSH
T1F7C24CF258D7987AD9AE9B43E73E2D038EBCC053B6846A44B3C8561CCD961BFD306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d609c51-5b00-4ec1-bcdb-76db4510d44f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3d609c51-5b00-4ec1-bcdb-76db4510d44f.tmp
Size 392B
SHA256 efa902503cdd01a4b7996df8c03481065d04353cd1fde6da735e89bff14cee29
MD5 b553ecc519f8facfbaeee75abd482ea2
SHA1 92da60ed8b08ad5917b365a570c79d415255a18d
SHA512 9ecf7c78669814a080ff1717d0db0607cb33e1e8e13d6982be2bc0c6f7f7de64361068dd4dcd9bc3d32def9a279443cabf0224ab061af2617f889d1bcb56081a
TLSH
T140E00102D750017EC03C4B304083163033B5C02A12E30347080412B038063902E34EC1
MD5 SHA1 SHA512 TLSH

Submit Download

4036a9c7-297d-4875-b663-c3525a8b1c90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4036a9c7-297d-4875-b663-c3525a8b1c90.tmp
Size 18KB
SHA256 8dbdc1e1dce77418bc6d5a5b2927d2e9baf5ec6cf9309f327e61805f04767103
MD5 5cb915a28535cf9fa211493c86556635
SHA1 d2c51176cfd1acd6aae65eb30baa719581d881e6
SHA512 05a2b6b9859c8c140783bf8fe41bf0dd24c62a0a64bdcd10cb7290b81a9c5d269dac81a6882df4dfa3aa0d972534d59930ababf3d118a687b7cd590bd1677c9d
SSDEEP 384:nZcIZsN2/Jp3pupFb1H69iX5F1V2J5VZh6DKhH8aog:PZj5U+aKJ5fYGH8aL
TLSH
T197828D326878AC7B58E3EA95F54736039FB89063E7C96F84C4ECA72D01DB2941307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

684bdfb3-2afb-4463-a7dd-661061d68c45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\684bdfb3-2afb-4463-a7dd-661061d68c45.tmp
Size 8KB
SHA256 f0876f83a11badcb04855094f556508d0fe0513e912e02ddb1115eeab3f1c700
MD5 31646bbeb5004ba81ae7acda100d05c9
SHA1 4cbf1b55467c2d6483d3fad007b328d2bde72705
SHA512 92e4228522a7ce895fa0a65c28ecca26390a158ef529bef4043024d63044731262b7323b43403a49693bdfbf0e3a81b89dd4a21e2b973f35fb2c9c6f0e67e18c
SSDEEP 192:LONS6AmwprQmiUyZz6siX5FNHkJiJJYU6:LONS6ipd+6siX5F1BJuU6
TLSH
T17802FA35BD686C7B8EE3AE54F44737235FA5116BEA942F84CAE81B2C01D764C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c0b9edd-8446-45f6-a54c-caa85c4e6527.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\8c0b9edd-8446-45f6-a54c-caa85c4e6527.tmp
Size 105KB
SHA256 3f461bb307501118465fa355b5c41e2a705f236a6f0a9d6da2f7ec220831c703
MD5 b128b9eab72c965083b92d5147aa016b
SHA1 50e10f3f576f2ffa690298c3261891f992813335
SHA512 c7356be074c8c4dac39c2b53fc3c679e844ec686a16cf50df2caffd578fd4ff9775661084c859882e8c383687ff10fc72b9c4d7784ae1707436f3dee76196979
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7r:fwUQC5VwBIiElEd2K57P7r
TLSH
T193B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cb29521835d0887aef733d211fa43d2903333bb5e86e2580dbfe7db3b16bb1ca
MD5 ae441104cfb514988d8468c296b33f4c
SHA1 1de1bdd3ad0b87ba57d165cd0d5b72d99a1a48f2
SHA512 4178d6169908ca49fae4773c8986a0c9d71a515b2fb4d7ce8fb9bcc8b10c415ac00698c7add7cc45f427547535401a518211221bcfe6dfc2bdc0f71f62b0105f
TLSH
T150D0C028AD78EFF4F021113C0330400031CF88138642210A58610D174C302C30380DF0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

0f62a371-bee9-4775-bcdb-84b16e41251a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0f62a371-bee9-4775-bcdb-84b16e41251a.tmp
Size 11KB
SHA256 d3b597c0fd2ba7daf96867ccca535f06df920944af1c6b723f6852eced24f38c
MD5 775acbd833eb49abf4bbce99b1ab61f8
SHA1 58520122edfc1df8fd062b05902cf7c046bebbfd
SHA512 c19cc6c28d38de73fe22f2f1e19a099c907c8cbff431645c02eb162488661503f6de192948340301b585404a96884dd80668b019726a5ffd19bbca4e8ea48cd4
SSDEEP 192:sxZgR1CD/fnsAnIdpRYY0KHW6+WNV45INY3QFLIg5l7J:sxZgGD/fnsAoCwHbPNRfN
TLSH
T10732D8567928A57B8CC7D61DFA26BF13E6F9503162D11E48EAFCC51C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16c54418-8b57-4d36-be33-d4df92365c43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16c54418-8b57-4d36-be33-d4df92365c43.tmp
Size 26KB
SHA256 bff60545d939d46839fa8d8c516fe44f2f56dacd060656fbc915a6a807fb6716
MD5 c80dbc8b060d6da55d623b3c93a6b2f3
SHA1 aecea4265cd69e924f6e2d9b4cc4c69d767498bd
SHA512 0b2cbf27faaa53dd542686ace4433dbd81b30ef39b26b797211a0c4149c5bc799b420cc0e81848537b504927531d6c2ac9dc884b0f60fa0b7c0a7a9dbfa73a53
SSDEEP 384:sxZX3D/fnsZ66s8qMpRiYnazAW8pZS15posJWeT+5OCSHbLhzfj:sf3D/fM4Mnc7WeT+5zSHblLj
TLSH
T1C9C21705A824C47B8EC35D18A83D7E33EAEC506222C5DEDE5AECCA1C019E1FDAB47457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21fe1c27-4303-4fa1-b3b0-df8c0a1d1d24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\21fe1c27-4303-4fa1-b3b0-df8c0a1d1d24.tmp
Size 11KB
SHA256 1908a409cd755232886af364a4b6a587e3bd662137cdecec1b1ed88b3dc75fa5
MD5 b357cd988797e0b6a53f6d211564fa85
SHA1 fe217d5ec63c6e3d26d5d12ec2332653ea64f349
SHA512 b657633aeea63ddf3787ce008f853435297604ce8255412974cc2067dbb0709fcc339fc014e18831521378f732978e1aaca0ac9a80e694c5e686e7785bb4319c
SSDEEP 192:sxZgR1CD/fnsAmIdpRYY0uHW6+WNVp2dY37FLIg5l7J:sxZgGD/fnsAHCIHb2dsfN
TLSH
T17632D8167A28657B8CCBE61DFA26BF13E6F9503162D11E58EAFCC51C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f6fbb0e-1225-48e4-812b-711529efd02f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f6fbb0e-1225-48e4-812b-711529efd02f.tmp
Size 10KB
SHA256 edf5d39de69261d37bdc392992d829c113543ff0110a8ab8c9e754c57ae2d4ee
MD5 c640091beee077ce8fbba83abfd8fd13
SHA1 174eca6dc5d2b5be5dbdc3f5d88ba7b04a65ec1e
SHA512 492f562788167cb0e4b2817f8fe98c3b3d0efa558fe03dc9e000f48ffe261bd50770a70860abe5d33042d377badf6eafb2d42e0defd7ac1144924dc5b80e76fd
SSDEEP 192:sxZaR1WD/fnsWnIdp2UHW6+WNVFaXY3gFLIg5j7J:sxZaiD/fnsWofHbeXTpN
TLSH
T1E922B7127E38657B8CCBD219FA55BF53E6F95032A1D01E58AAFC861C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

311e705a-430c-4149-be1a-e42623dad426.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\311e705a-430c-4149-be1a-e42623dad426.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

616230f8-56f1-42d4-872b-1ca9b8e6253c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\616230f8-56f1-42d4-872b-1ca9b8e6253c.tmp
Size 27KB
SHA256 ad0a80ab4bc91c43f5bab914c111024ccc95c22cd528afc242a379fe9a082e7f
MD5 c191cb74cf63057c378f2765e85990b4
SHA1 27801cdaca75e7f6ed407d2243adb7fc70c0c46f
SHA512 5ed40a102a76946c876aee426a299e136eac3639ff2f6af8328ebb1ef85781be54d6b7d24b36e002f4e122049ec63680dadb1442ef80edc160bc26f3fbc8ccb1
SSDEEP 768:lv30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72DrolZMF:lv30AbSWvS2l9u1jaLmLZ12wC
TLSH
T178C2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

760d9775-a7c1-4d7f-acee-ba92d4062ed0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\760d9775-a7c1-4d7f-acee-ba92d4062ed0.tmp
Size 11KB
SHA256 4f3c26ad1947f5b53f02248eee7e25eed72f76013b30b9f8e04b07e5fcd6788f
MD5 9ad165c8419ae3f611649ef15ade4543
SHA1 2dc1cf897251b85c22e015dc6b6c445c2a628f3f
SHA512 9b1d9187a9a71d7dda7a17e4405c01f6d781cad403ffccd165f118005b2ca199c0b23c2373f9d0f7911d0f26aa4beb785712f52437859c7e2da330dcd27ac109
SSDEEP 192:sxZtR1CD/fnsAXIdpRYYDJzHW6+WNVtthY3vFLIg5l6J:sxZtGD/fnsA4CcHblhsf2
TLSH
T19042E7527A2869BB8CC7D619FA66BF13F2F9503161D01E48EAFCC91C04E76DE224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87a6f727-d91b-4a9a-ac61-27cfdf73552f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87a6f727-d91b-4a9a-ac61-27cfdf73552f.tmp
Size 11KB
SHA256 5090aae1244dccc0622066151a2f64cf0688028a00b72b17776747203380d96a
MD5 96a4db0e73765c012045d3a4e30c9695
SHA1 54ea20b4a25f783649327a60a732e79a3112979d
SHA512 888cdf2c0631d2b18fa46fef66dd0fcddbeffa399a3805b42cea819a1ec5268a0e60a372592cf500b234ce70589c1c3198035b66ddf02f1ff1982ee6169e3b9b
SSDEEP 192:sxZ2R1CD/fnsArJIdpRYY0LHW6+WNVtthY3vFLIg5l7J:sxZ2GD/fnsAuCtHblhsfN
TLSH
T1B332E8127928A97B8CC7D61DFA66BF13E2F9503161D11E48EAFCC51C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97744a97-a558-45de-8420-59e31ded8245.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\97744a97-a558-45de-8420-59e31ded8245.tmp
Size 10KB
SHA256 9509208e5c6e0208deb2bbfadc96668b04b9b2495f6a16f120f2973976dbc886
MD5 75b908d7b6b923dc08bc1aee3aaa34e6
SHA1 fdb0fb40b4ad850af046cf6fee614d5a27152530
SHA512 2013947dcde77409bfcb8f1cf1b1144bd9084d122a40652c290ae681d7e3fd8ec073ef103acbd140161d443a99b1f7c7309d0c9cafa4dc765391305d87ca2375
SSDEEP 192:sxZgR1WD/fnsAyIdp2KHW6+WNVFaXY3KFLIg5l7J:sxZgiD/fnsA7VHbeXVfN
TLSH
T18822C7127E38697B8CCBD619FA55BF53E6F9503291D11E58AAFCC61C04E76CE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 c0eee44874a90e9b1ad033bd410ec19c20923e8d9cb144fa084095e68f3c0db6
MD5 fd5ec4abc719ee4a21d390051380d788
SHA1 26123c078ade7fe2fb8575925fffb3213323c140
SHA512 64001f6b5853e461d918c2b0e9d485e20409a51be878d5d18706c2225fcbc3f82e4910f7de2a7c4dcb23d2fee76ff3b8503fc4e98909eedb60abece409eba27a
TLSH
T16BE026E605CAC32EA70AB48702BC630C83C1376AD2C06E0E2B08CDC47846444A2826A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d5b0fa7bb9808b4872e1f92dcf9175ff3248ef7546e2c2f739f6dc1c3e64f8b6
MD5 471a446a760c4b4b6e9c7167dd534589
SHA1 7dbe3f8fd4d05bcca48d55bb89180ff7dce38ce1
SHA512 e2d725bebbdd2037074a0194eb6f1e852c6679ba4f47ad0650e4b547ec804e2ec7505654faf6197559bdf97e7ad3e56982684a676d1bfe9c5d5593a0bb9c8243
TLSH
T13BE078D749C7C61DD79464871374530EC780365AD6C06D0D170CC5D979058407AC59E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 dd64c52ea4d3852252f8fb135df90dccc89e44c7fb3afb5a74a08959de993def
MD5 a864584c51236cd7df252349e4a4edca
SHA1 14d3b6b49bb44770f32410a9d889d389b3d30229
SHA512 f19d0703b39785b1108f3e4e230d96d49dc8b1ce054dc8fb6dbea547bed4ed1eecc0904947697a2d3a9078dc38117a41cb90ab545f0ccfff6a812c7876e326de
TLSH
T197E07DF909D8C22EB72864974178A30D93C0375AD7C96E0EB728DDC87C07440B7E26A0
MD5 SHA1 SHA512 TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 26KB
SHA256 153fc85b70298beeb1d61a5f723331649e7f23bb77302a66e61cb3e2fbdb5e79
MD5 7660bd9909fb097989b19471a75f1b7a
SHA1 a389d97de580a2d6a3723112234bd2b3839ce0db
SHA512 7bc82b1ce3a44194677166280ed864f9a389a7d6e8df630db42ca11ef42be41603c53d6b54771dd904e55e73f4048571a61673902817db2e1b4a58848c6b0cf4
SSDEEP 384:IMazUGXW1v0QxaJODxEG9vSTTZdxpUU/JzmYcNgITcay5S65C0a5mlAPXoAONIRC:aUGGGQ84KiSTld8UoxQW6ja5Fvtun
TLSH
T121C2E19F8B31F4BB89817CBDE67ECD049BD88005F277667C4E7C1571448AA2988491E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 31KB
SHA256 6c18d579fd87c3776be068b762cbc83fde3acb543d49eabd3ade842eb987e887
MD5 fdf9c509a8095ffa556117f486a94a8d
SHA1 d8a316f7cbfa46e69876c925e58fbf7b7c1abf0d
SHA512 1da75065bac5582eb357a34e82887838f2e7acfa53df36a7a6a32049aad18d26cbe15b12de3987803a3747677e0e222a964444f0bbca3163c686469729ec667b
SSDEEP 768:3kEJ6k5UQdhzhODqcJnoGp9OFjIWQhvOWXFgHV8zpKjFOpiPyWwL6W:Ik5UQdhzhO+cAjIvvO9HOKj2iPyiW
TLSH
T1D7E2E1A8DA90DC3BDF6653F4ADE7105EB1FA7BB4897108E1DE12FA6D89D12C0C4144E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 21KB
SHA256 38e3b8fd8045048eb311d90170a4429ed2c8f405852dc3d91b5af8452758703f
MD5 341687eeeb6afd29502e2277d9762c7e
SHA1 42f3e9018127e0e9793b61620d436aa6b4786728
SHA512 a369d82f8abbc490226be0c61e896e596a3055003a1dcd6ec63d260b9a54dec1e5ca4f237f52579d4a1f5d31c02b1a5cca230f112fe1c4a851c3a44a8f663694
SSDEEP 384:fQgo+634smd6YFbZ1D+812UW1DUV4GY8FxV56UIHOneDw6JS/niNC+i+:oVmd64ZFjLYgtw7O56SfmW+
TLSH
T182A2E1412A94D71AEB6FF37718D5F55398AC3B0E40589BCB2F8165A06DCA0022CDB90F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 32KB
SHA256 d806c0f04855d0d9228b3890f5835a5bce082f4647f33b01386ff3d3ad360290
MD5 fd532f505757f208c439dad40630be36
SHA1 bc87c413b2b43dd9f8825940d58e8b1d237a88bd
SHA512 55b74392792bebf66eb03283578f92dd51aa5f641e2b64f3be008d96cfd0887c37c97e9e7fea90bfe1d5bd9f428eab4621077b89beb17dfaf7d44e78b293829d
SSDEEP 768:TqkksBW0hKzjiU7MBVwVnRLF0OtiQTinH5xsIp:TqkvBWc4V7TVRVtbTMH5xNp
TLSH
T10DE2E1C50B305EC7CF768CA7503BF0AD242EA67C96EBD2585612F1B4BE6025061E395C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 22KB
SHA256 3941800382ab2dec034a9c58384a161195371e1a28d3d8b8d49a68158440bc28
MD5 7b04b81b191cb377ba3f90648d4fa9cb
SHA1 5ace23ed64cbf2365a982765cba6ab48de064ba6
SHA512 cad44307fe37e97ade57f757ed9b551f5c235707970263a468fd4e4a5cbcce56daec5dd09098ac154fdf6099cdec4ee36506731bec519d969898e64361ebaa42
SSDEEP 384:tjjtUSvtFqHwrIjzVR2GpAkV0Oj71rLxG6eX9FfDHWpsENfZ/XdBtbVkKmRkv6+O:tj6gmw0fBpfCOj7RxG/rWnh/BV6RA61
TLSH
T17AA2D097DA3F0D9390FA5CD476A849FB8118DB11D0B96FCBDCB918C06970E388C6A497
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 22KB
SHA256 214c33b3a69566d6fb13b419b77d8451a691020b98a19bc35cac407e934e8cfb
MD5 999cd9deb06ea53e858256f5c8d36fc6
SHA1 557af11591d89b34daf292f3a4cc0ae6c5c08286
SHA512 2896508bc6020daffbc1729239a5edba36209f3b46df9855e79162a77761f6fd94cb498c060b83bfbc4ec52efd26706d6e02864c370b8f4abf7fe74ef5b3de5b
SSDEEP 384:Nz9ZHRsGeRrFLfeS5fpk3o59j7WP/1w11JOcqvkVqz5KUSsGlynz56pTau/Iv:N7HT25LWS5BqoTj7k1K5q5z5KP6vh
TLSH
T1F9A2E150E0DE56285FB2B0B3CAF714D12D6C998C9E984A1FCAA78790F9DF10D53E1392
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 22KB
SHA256 c42c1db84656072d7cfc0b00865d553e37ad49c3b7a0bf5373b1681988753bef
MD5 736433762bbf7b6733840b77aeb57f02
SHA1 df2ab7156baebf77eafe0682ad19dd5428c06593
SHA512 46986a9c7ced0e0c02bf269043f13fd31d46c56f2168101394792f99217aee45d67721d8bb3c5fdc0750c3bdd2d350dcf98ca2a97c20f39be60f5a2cfa1a7609
SSDEEP 384:jKE6+sE7M/iWwOveFd0wQ7PEJ/Bwoap4VPCN64i/IGN09TJ:emEiWBvtwQ7PA/BNap4c9zGaZJ
TLSH
T172A2E1595FE3F92EFE540636C1F02674F21D36069908CB1B8DC29B9A97298CEC4266E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 23KB
SHA256 bed7f215b532b3cc9db00b50cce15aae0809e4e11c204163f72f9827520161da
MD5 6e409d045985737329428cd7c6a8147d
SHA1 8124eaaa4d9de45f02b607db1e1402df071036d9
SHA512 8ad20fc8cc66cbfc75bb821af3f9c2cf0f35b7cdbce7f09fcf2919f2ea3a6014e6526c8d6d302c6809616b7fde320204730f8851dfcc67f9c17aa1430d7e4542
SSDEEP 384:AsHGTXFzc5pbe8oaLs4fGdlJwBMmyplT/pxlX09t9bZE8hZ4vAVlekdwjjTAACtl:/HGTXFzEe8o6uqGmyplT/pxZ0bZd34ve
TLSH
T1D7B2E156F922F68CBB91BD3A626E696F8A9F8744D5D48C7F1F3DE8014F2A3610073520
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 33KB
SHA256 a93a6256280ed32fc5d0852d48fe4df39e8dad33614c7d0ee76efa875262c49e
MD5 27acdaffcd7684cb8f6d95c54d1f9558
SHA1 c35343d3ba2f2d6ddd8a9f104e039fdcef059c18
SHA512 23f3828174bb0ac140f77dabfdd175b89993524423ce4c9c97fa12834c570f9f222927fecb5202c76a78c63e83951580c25f36df16fb5a04d18b46be9aba1717
SSDEEP 384:B40nN254NUEPvY4BtiokGJR7QjyYVPWcbwl6o1yZveA9kJVTindNlMKNvcq7CTtr:BDniAXY4vtQjrWc92gkJVTindLTcqeTp
TLSH
T146F2F19BB3955A90B22A924DEF2A88BA51DC884C61B61C2194C7542CC4FA371F702FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 16KB
SHA256 72fe5aac38530484295ae96756f29d9136d7ebaab0895fc87fefb09ce7a2fd18
MD5 82c9919b88abb46f68384143d90b8704
SHA1 bebd66941512beec77278258f208cc81fa986c30
SHA512 9059bfea6e331e4ad30d47d1b12e6a917387dfd3dd3cb5fd46a6774a26c4ba871d0c339d5c438b4648fada8070ea249716f48e0fe6edaf729b206c7b68fe6af1
SSDEEP 384:EijzmyRz+ijf8wDL4Oga3juhV2mmM5qXjjPQHIjE0AZQ1PZwXsJl6n:Eijzn+SHDEMaR5aPoIjE0C+CXsJl6n
TLSH
T19472E15E1D6AEB0B51F1A35050B3221034CFAB981525D7AA2E6E03D2D437B54F9CE35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 21KB
SHA256 4dd991652fb9e9d2651e8d109ee60f922bda957434a8b1f5838c0cd284dc7ded
MD5 d3f1fd921b7a8f7214f63eeb300b7d57
SHA1 d278fc95c3f8fda7a7c5116aca61f1b69adbcd0f
SHA512 0fc594d50ebe585e434c006f277846f1a3b363e59e8edcbf2742dc6916384d44284a13e11900a96f7607c14d41138f6fccafc11b4798abcf112d6587530d82fe
SSDEEP 384:Iy4/b6MMOIT+YzoBQiWuX6K4OiusFJVN2eGDmQ2i5lVI4c7buIR+IKAWMH:IygGRlT+YzoBd+CJsFTNemQ28lV9cvDd
TLSH
T189A2D0831CC1C21BCF855A2BCCD597A40236151ECFC63629D77E5DBA3858F63898A91D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 68KB
SHA256 ce33d09a38e4fe4c20ec9a69802eea37673cf4c9cc8313fa22cca11eb8dc107c
MD5 82bd9b04644068d9b734272192503476
SHA1 2ee618c3fd1ffb3b53324e0005d49d3766bfa8c3
SHA512 6fa76dcb5788c26544996aeabb7697c0562a2645cb534b9c8bed62149cddca28cb123cbba24d1537370384df7ab4833c5504314c437cbdec9943316167b82bf2
SSDEEP 1536:ntqJSS/DFx123S9ZhJtMJRRgGNjofMUOaXPHcfGfo8i9nZEh:tqwHSBvqMGcMxaf/0P8
TLSH
T1CA6302D0960F406AFCC28AF401B89C1D44714B261663DCC5A0BE29BEDB6347B9167AFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 18KB
SHA256 40f088fce01605128e76e724490a6dabb727793e37a075ce6b2d37a53bcd7635
MD5 1f71a8705633e092f61b51bcfedbabbb
SHA1 734de3cf8cebec41efb6139ad505c79f9699e374
SHA512 bb6d3289034f402aa04dd6cf3773af78fcb2f9b7ad8f4dbafde6c5036f83ca20ebec1a1012487f8e92b96f164c98ecabdd2b4a2d085f452927e244b3547c217b
SSDEEP 384:mnIFkUJzhIqsxwWDL3J4vWFGu9CKbfweJ9j79EGB8SMcRunTEXiW2:mnUaqn6b2WUu9Hbflnj795BvdcQyX
TLSH
T19E82D074A84A188D470E437F33729C2B53A882E12D77DEF0984578EFA81BA38571B5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 36KB
SHA256 8f87ddebe11b12c8d1af14329dc750323f1e6a1afff407290d29c4c295325df1
MD5 1b82196d059d062f9dda64fea0768e11
SHA1 a42eff220adc7f01f5b92b9d6f99c09491b6b7ac
SHA512 aa8ce7ae242d4a809a4a9c6c19151b787843b689fc628178f1bdf2f037332f2453bf3ac25331e96b94ce08cede9ab5b102a5aea4dac481c527b2ee2651d4a8b3
SSDEEP 768:KuwUcLbg5G37lPF8zHl0+03ugFoVz7Sfmy9ncvYzHNWbQwS0vZbk:GfgI37H8zF0+maz7jy9cvYzHNSa0R4
TLSH
T15503F160499930C73F000F846A394BD6581531B6EF2CEFD8227F9D6D8A6EE62D4E2D5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 146KB
SHA256 7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880
MD5 c64278386c2bbb5e293e11b94ca2f6d1
SHA1 6b99aa650bd12a36caa14e0127435d8f4cd3ba73
SHA512 0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821
SSDEEP 3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW
TLSH
T128E3123CF2C6D486735F5AEADB79636894FD0A2E74ECC67D26B982112048F828174D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 68KB
SHA256 af92ff18bf621117a6340b4e8c8a69e1c734901c91b2c4568b03a25ed970131f
MD5 e34ab027173dfc8fd75af29292314081
SHA1 4416ef9286a3b3bbf5623ae22b90024ef98c91be
SHA512 475e7f832ccc8904fd87137f49ef7d666273b3096befdbad5eb5c452eebfa2074dd9906484634ab4781b9783bf9c934bd6658891783c16a798da963c0f1e88a8
SSDEEP 1536:/di8r6+2lqDlcMjFYglMO/dqLagPiPvd3627a11VyK7Ie:Vde+2MfK2d2pPidSLy2Ie
TLSH
T1B86302297DB1A0A79533F333AB6E40610EE632DDADAF1E6DC8D2C531D3B05A045784B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8085b7cfd8bc5713e09c1ffb05d9f1f79b4a00a5f9b720fe3daed1d013e7c7b3
MD5 ddb0dc92c24326d5aae569c666fdb3f2
SHA1 a346f9515131c934a333827fbf4ccd17bd0ee166
SHA512 c1d00e8364469f9bd1552febed02b9d71069591f5706810a60b125566a729cb9384434da82b9c916233ac143e95daddb5eca3793af501f7c70eb42eed2e377ac
TLSH
T1AE71D8400B134A57FB9935B0DED930ABFDB074415177DED29350EF78AA0AF815C95392
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8f2e90ed76b1e60e4c476c2b627fe9f9d89ee6c45d181a59da960053dc6a56d6
MD5 eb60f876c97c7a1f53efa0e27c0ae59d
SHA1 6ce583ed7d06672715e4405a5ff20b52c0140a5c
SHA512 dd24a7f549c9c8113ead2a5b7d4d911e526034047bced02e917bcb47d7b105fad66cb9579275987e1a779d2cfe3ea64fc2578d5ca1a0a22461929766c2658439
TLSH
T1C271E7401B134A57FB9935F0DEC930ABFDB0788161B7CED29350EF78AA0AF815C95291
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6c74162a4ce5b0aa3e67d2b1e6784fd6c8694638fecc1237ce32118fe2cab799
MD5 09c6cb070afcb8a94a1326f16bf68677
SHA1 ec3c7cd0f206f179388d7369a4890a5f511bc6ef
SHA512 97b625fa3c543a9143c1057acc4da680706a704a9240f3e056c4d7bab2124e422a351c0c496d16df324e76b5701256f9577d044c125ae1fec365f65c328b2f4b
TLSH
T14771C6401B134A57FB9935B0DED930ABFDB0784161B3DED29350EF789A0AF815C99291
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bcb45553773d72e378548cc4c24b591187fde5ea1d5727b1b040b5d8531ac85c
MD5 1c381f39429e8e502a361981e937de4a
SHA1 e410bd6ca4dbec4c18b7e4d58808fd5af6267c07
SHA512 16b7d42ab58a2729474eee0c96e658dc18e96338e7df4996ebc4a7bd11a12de9fa6a31e934d11c6659cc21648568ae93bbe236845ba9b6d916aa14975fbd020c
TLSH
T16B61A3410B135A97FB9835F0DED930ABFD70798061B39ED19350EB78860AF859C9A294
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 715592d411a8e3c757768c309bda9e40d358731f3197d22a9e6f9387ca6da9a1
MD5 785e6184bb574b54704ad0bdaf25e394
SHA1 71d6d9323b924d4715b752973c629449f67abd68
SHA512 9bec2b5825ee4b4b71ec10cf53b939c543b1a5a28c7c25fa8a05559a3fecba9ad049fc5b7032b8dae459f2b2c9b6b8807eebdd93fc35c462cc582214a6b5334d
TLSH
T15561B4801B135A97FB9835F0DEC930ABFD7078806173DE919390EB789A0AF815C95295
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9e145e92fd4b798c2714e3d1d01d84f4e1cb9197058dbc5bcc4fe48cac0cb70a
MD5 1e4a724cdc274db1067832521e216994
SHA1 7be94c0961a4182e0f5500e111d44546c3b63028
SHA512 52f0d922a7d31d3258a87c869409f484aa4cf5cb6d17038da259d315432723719890147f0ab08a64f7053967948f80bcfbe91e211dadebe591829114931070be
TLSH
T14861A3410B135A97FBA835F0DED930ABFD70798061739ED29350EF78860AF855C9A290
MD5 SHA1 SHA512 TLSH

Submit Download

302e8e72-832e-4101-92ce-5fbde6620d93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\302e8e72-832e-4101-92ce-5fbde6620d93.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5019dc6b-4dc3-4a08-b7ed-976246895805.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5019dc6b-4dc3-4a08-b7ed-976246895805.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

827c74af-68d7-4c5d-a22e-96c09ab3562a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\827c74af-68d7-4c5d-a22e-96c09ab3562a.tmp
Size 5KB
SHA256 c43a4f7536a6744d168bf567417317c9b356279afc1d4ba2f5670c91c8dd1eae
MD5 88760ab21c64121ad33cc7aaa8eb2bde
SHA1 fe9b6ddfce8337456249a3086d4d94544a4dc648
SHA512 7c90a7b7425d4bf4f79bfd2128762c5631faa93a5239c4a5d3ecb7abc1377a643f151fe2e9c5498b31a536b727569eb702883dec4e9012e17f5a12efafc7c4fd
SSDEEP 96:D/OZQZcZvZHZuZNZDIZRZCzBqZBwBjZlZhYFZwZbZfj4/WGZGZhYJZRZzeJZPl:DWyypNQLJITg1qTkjjrYF29tj4+G8rWi
TLSH
T164B1ACB782E1066EE9A146F07E247E97EF59041842583D1DCED49F4BA3D14B2E242F8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a597eac2-df5a-42fe-8243-c19971df9731.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a597eac2-df5a-42fe-8243-c19971df9731.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f6cfa19b-a6ae-4ad3-a536-e927c5612267.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f6cfa19b-a6ae-4ad3-a536-e927c5612267.tmp
Size 5KB
SHA256 ab050495d9ce6a16550653ac91829f63bad683fb3587da5e8ba42c46dc1e75f8
MD5 7f1abe522002c24bc9776907c7fc205e
SHA1 aa71d541d61e0b7d253fe98b2344747b17cb730c
SHA512 bf540308c95272ad3c82cfe5f4bce8c909ed072e46ada56e9eade08e266e5541cdca39326b5575c43951311e4e64eb3f9daa79af71bca75f7a4fd7618a77b3d0
SSDEEP 96:DrOZ9lZ9JZ5ZeZfZCZuZNZczBiZBwfZpZqZq6GZhYxZh/QZfZ7ZRZzKZPl:DS3l3JHwx8QLW1iTW3cY6GrYxr/QZtrM
TLSH
T1BAC1AAB2C2D4466EDDA256F07F247E97EF59041842583D0DCED49F8BA3E14B1A242E8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8c800a8-7874-4800-b918-2ff6804cce69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f8c800a8-7874-4800-b918-2ff6804cce69.tmp
Size 4KB
SHA256 ea9c36e1b974cd64c70201491d0d44ebfc7b45dcb384bf42695f75935f8c8832
MD5 046f623fbbaf4bd2e8f3a68e9509206e
SHA1 6c17b40dc8ba16d537e150e4f1f2f2b87bedfa65
SHA512 900aa8587e8b39cc713c5e6b041e5bd898665744d558841e786c75012dec888f5b2fbf7671f9b70cddbe48d01f347e93dfd2939111c8bf9d71f84bcb169b47ca
SSDEEP 96:DrOZ9lZ9JZ5ZeZfZZzBiZ0GZZ2QZUZQZhpZhYXZfwF/ZPiZzQ:DS3l3JHwxv1iKGZYQW+rprYXtY1im
TLSH
T19791B9B6C2D4466EDDA146F07A247E5BEF59041842683D0DCED49F4BA3E14B1A242E8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\temp-index
Size 1KB
SHA256 c4daa79bef8e7483f452107878fb5478c69aa9a488008002f57564e9c11e8adb
MD5 995eea842013135f62e43348f3b8a64d
SHA1 f2c0bb1fa9965ea094607feeae4b7cf6f485bc3f
SHA512 cdc71d81a405ad6170abad766f75cfde1a8006c8cf3fd626b96e53f3ef016fcdacf0855cce1fad19870f76d0f3b8f0a886d4c041b702d24644e4c04b192b0dd4
TLSH
T1F7216F820C920E13FE941239243D284AB374A2CC4384AE5F62FCE12A8C96300A8851A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index
Size 1KB
SHA256 dcd20cf79379b371af961d2bbc653774b01ee8266a540785fac0f6ba00bc7e0b
MD5 1c59022fb66ceadfc54eacd64edda917
SHA1 7bce288a5cac4f4f29f9c22006916f8c73055b67
SHA512 f5fbd95457ceb0d779ffad5f03b1180ff51e996d8c92e3a502982171026f1881b72faac564cf8456efbde9523113c30121f2e45a6a68032ed4a9469795cadc55
TLSH
T1C821819240A30B22FC4413760AAC2C837368E14843843B0FA3E6A17ACC82B40AD83AE0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 b7be7a5bccc71705bbb4ec359c34e60afdc4293a98885bc308169e7ba42b0b21
MD5 1b4692c269f47aad2732154706583e8c
SHA1 ed120bd534002e146b1a4dab2d930b2a25f0673d
SHA512 3cf10b2d72ec4d77b8df33d8e8d6f8cf289a826e9cadd47bd596b65dcc0385a3e54f27ca04e0f7ba9be7207b5af49c847eb37b5b24ed41674dcee6d9cbf302d6
TLSH
T1C0E0C0F26EF71950FCAF83D4147088B541057894DA08FC4F10AAA3C7A4B03113849C10
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b55f5118544038eee86eaebcc27570333e0445519a547a603d10b48f2ce361a5
MD5 9a2369bd58a1aa1ccdf82509921cd749
SHA1 7c7a973396eda7cfeaf64d1fc8ebcae3145af319
SHA512 c619adaaee2e3928e748973ff998a13cf8a9549c132cf40ac96ea1588cb878b2f9de76abb07169920ef246c840a311ef72faea4ee2ad3b74ea41a8fdd7156b1d
SSDEEP 96:KVFsXTtDnr0XmaarrKiSahr2FdOPnYfnSx9nBhx0dksaVxKi4aHx2/X8VsfOKoQQ:GH74d5
TLSH
T16D915616326B03413CBD265981A98A6B924131F77015B92FBFBD51E29E6FE048CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a176685f-d1ec-4dc5-b9be-72b98c1bb7dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a176685f-d1ec-4dc5-b9be-72b98c1bb7dd.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acea64c6-f689-4695-b3a0-71f9e0769d17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\acea64c6-f689-4695-b3a0-71f9e0769d17.tmp
Size 26KB
SHA256 5248bfb02061b0c16477765bce7559f4ef51ae8d1dd3128990140c45f2d53eb0
MD5 85592a8b5da5286d154dd6e2de24fdb8
SHA1 bce75b22141d934a68ca0461a970b74edde506c9
SHA512 1973f7fd12639ddfa94d8704d70aeb144b59d8ef95db1f838cdb7fbbb5bc46e7c8993ee4856af15f87dca40226a41d8840b55ec32b3874a8fa060656a659c1f0
SSDEEP 384:sxZp3D/fnsZ66s8qMpRiYnazAW8pZS15posJWeT+5BC/Hbmhbf2:sR3D/fM4Mnc7WeT+5k/HbWT2
TLSH
T1ECC21705A924C87B9EC35D18A83D7E33E9EC506222C5DEDE5AECCA1C019E1FDAB47453
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d030d586-5efb-4755-aab4-ab3dea5e1d7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d030d586-5efb-4755-aab4-ab3dea5e1d7d.tmp
Size 11KB
SHA256 502292fb3fe80ab8f797726c09d28ecdd89ebe702f709357d89851883e9f788f
MD5 2edcaf51a75da51ff1667de70c7caf43
SHA1 0b3ae55d885ccfa11eadc584c1253a706346f480
SHA512 5402afe83b403c3038f49bf60c1d29f850b706d7e8beb9ebf8c0bb50a682b0d667bc9cc76e6e112fa7a0e50deaf8280238e4afdf12f8c0212517c24f28ce3f29
SSDEEP 192:sxZpR1TD/fnsAAIdpRYYDJEHW6+WNVeDhY32FLIg5l6J:sxZp3D/fnsABC/HbyhDf2
TLSH
T1C442D7527A28657B8CC7D619FA26BF13F2F9503251D12E58EAFCCA1C00E76DE224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d84973e4-acd7-44dd-90a2-6e9930f1d066.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d84973e4-acd7-44dd-90a2-6e9930f1d066.tmp
Size 10KB
SHA256 e651f5a7b6a1f646a805d5530ad3c2d7998330389753d177388eb8c183b23972
MD5 a7163bec57d74de81848f88e5bc23742
SHA1 1527590fef4a91b37342904084065f79791a59c2
SHA512 41da4b85b87bda827e6f3e899fbe3e0abdf8ea75a863ce88342cabd7b7b309960ad7f894e4d2c9f96008e219f877f1a4d8893f09af823178787b54d7710dd2ab
SSDEEP 192:sxZaReWD/fnslnIdp2UHW6+WNVSx/Y37FLIgU7J:sxZanD/fnslofHbW/oUN
TLSH
T1A222A6127E28A57B8CCBD61DFA16BF53E6F95032A5D41E48AAFC851C04E76DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ebaf59b3-bfbc-46bd-b486-6b8cc99ccbf3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ebaf59b3-bfbc-46bd-b486-6b8cc99ccbf3.tmp
Size 11KB
SHA256 cb06c90b90ea73d69bde1015e870aeb0e361bda86d3d61c64b549f5b05808e6d
MD5 0219978d8e26224871a8b30642a73747
SHA1 fec24de84335782b2a5ad65a932564ea20bec1cb
SHA512 8577358407a6c3215cde689dfc724bd1afa5f4f6dea5d544dab188835db1c2aac4519d28c46d2c5587024c57b10cc292fa186bb8112c898949c01d4f96ac9d34
SSDEEP 192:sxZgR1TtD/fnsAnIdpRYY0KHW6+WNVUaFY3MFLIg5l7J:sxZgftD/fnsAoCwHbrFdfN
TLSH
T1E632D8567A2865BB8CC7D61DFA26BF13E6F9503162D12E48EAFCC51C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6c308ea-5291-4198-a23e-ddebc6855669.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f6c308ea-5291-4198-a23e-ddebc6855669.tmp
Size 11KB
SHA256 ae9740afda9021303941a74c8e386d81d37405b8291485c644429f1a7516a646
MD5 b274e403ba449980671b3d94ff5b8476
SHA1 929a3cc8bceb13f5f7670002e21d77d3616c26dd
SHA512 0e2b4d295b55c6f280d30f9737c6869b895b1e2157cbff066063740b8ee8b7c7bf52dc9bfcc789bde0c56c7d9af9f575b570a7e45f06619a7f7219be9c7f1945
SSDEEP 192:sxZtR1TD/fnsAXIdpRYYDJzHW6+WNVaohY3CFLIg5l6J:sxZt3D/fnsA4CcHb3hTf2
TLSH
T1AC42D712792865BB8CC7E619FA26BF13F2F9503151D11E58EAFCC61C00E76DE224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fea2ef71-9062-43fb-a696-8df3149a5cec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fea2ef71-9062-43fb-a696-8df3149a5cec.tmp
Size 11KB
SHA256 c86b03fe94d73d4eac41221701e13cfb88ef30381347ffe0257eae554c7dc1ff
MD5 f2b41aaa76e06c2449db7331bd8dd56f
SHA1 0aec0f7a5ae837a0c7f9afd9ea2b203415b96754
SHA512 a8ae394160442c0339f1d8c1e39b047760fb88177804aae092bd313aae754ed68ae7f918db2263a193308edb832a3dff6bcd8a25178e0a1f830f1cba497c4038
SSDEEP 192:sxZgR1CD/fnsAxIdpRYY0WHW6+WNV7RlY3VFLIg5l7J:sxZgGD/fnsA6CYHbLlqfN
TLSH
T1F032E8567A28697B8CC7D61DFA26BF13E6F9503162D11E48EAFCC51C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a127ee8-2d60-4fc9-be67-b9a3d5fa7fc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8a127ee8-2d60-4fc9-be67-b9a3d5fa7fc4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b0487ed4b3e827531d63555b5a405828f7ede904024e84e244afbde8800b9ea4
MD5 936e796ede33a7593ecfa2d16a98d219
SHA1 afb56b8a214545a92f5210d25f1f3f821e8e2252
SHA512 f3072e61c98e5a892d0d0f1aad39e2369ff829d2042f80867f3c3503088ece5643f151d7525b41d51b8d86c291280222cfdb7c5b3f7c1272d12586e33a7b6098
MD5 SHA1 SHA512

Submit Download

c5bb01ce-c016-48af-b005-e595cdd57e11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c5bb01ce-c016-48af-b005-e595cdd57e11.tmp
Size 18KB
SHA256 00ea521248205b6ecafde2f07c1f4d1d17b2da852277f575978b850b0113345c
MD5 240133af4728bc7e2afaeb82c385e420
SHA1 1aad36b7daf3e7ce7d1743a3203f8f9f4cd217d2
SHA512 090666cce765d14342022306b7e32ae2efdf8b076c68226c3ef8ecd49c460249d800d201535ee47be4652268db7eade4adf2612e491d8682f22449c559b12c28
SSDEEP 384:CZcIhsN2MJp3pup61H69iX5F1V2J5VZh6DKhH8aog:wh25B+aKJ5fYGH8aL
TLSH
T1D3828E32A8786C7B58E2EA45F54736039FB89063E7C96F84C4EDA72D01DB2941307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4fabfd1-d0a0-4170-b8b7-b4db7783d0ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d4fabfd1-d0a0-4170-b8b7-b4db7783d0ad.tmp
Size 18KB
SHA256 19c3a50d6a9aeacc044dededccc39d5e5005d6cb07d2bcdbab51d61383eaf91a
MD5 6a943d8cad0702bb1eb5de5c43a721c2
SHA1 10de484c88eb10d9de5b56b6da3abc00c4d6640e
SHA512 0ef75247ec344b45bf0bf9d376cf856b4ebc7facf5f2042956e3fc310226c2a96d121021a59080f174927fd976a89578739fff18b31831e54bede9713e2d78a3
SSDEEP 384:CZcI/sN2/Jp3pupXb1H69iX5F1V2J5VZh6DKhH8aog:w/j5a+aKJ5fYGH8aL
TLSH
T1CD828E326878AC7B58E3EA85F54736139FB89063E7C96F84C4EDA72D01DB2941307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dce5a3e9-d5b8-4fe2-9fe4-f2a1839c97b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dce5a3e9-d5b8-4fe2-9fe4-f2a1839c97b4.tmp
Size 8KB
SHA256 61015ac598265fcacb002f2e0d357b84e38846a6033d7f20f5b275225eab3500
MD5 33bced15754d5015aee1323a53ccca8b
SHA1 803e06819ba37271d0c6df768ac3709ab4286ab4
SHA512 0a6b2a755e87026837e541456152030b6c36f24d1e3ecdf28c8c214d29b8558ca1153d95581d2f56dec7629db84d6ccf61a116dc98e55921b719013081c3a1d5
SSDEEP 192:LON/6AmwpOQmiUyJizmsiX5FNH7Jd67lRJuqtU6:LON/6ipKiGmsiX5F1VmJ5U6
TLSH
T13E120936B864AC7F4DD2E954F04736139EA55267EB887F84C9EC272C06DF69C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e92a6856-e603-457a-aa2f-2261a837a1bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e92a6856-e603-457a-aa2f-2261a837a1bd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 05c8439f1f6d82dc3ffa4da11ee897509ebd8bf2b7dbdfb9d154eb75fff3292b
MD5 491fb56822d2d2dc5deefd08f980e725
SHA1 1d5cc48b97685b8b2f017f9eb45513d8a70c5219
SHA512 40c8e41d05bc5323409eea7cc99ed17c57a2a23baf6de104e2aaa2790d5058591c39f75198341f94110758b8b0c25d13cff2b082da430e81c93c61481b17f408
TLSH
T13E410758B6F91108B3B26F5AAFF6A86D487FBC732E06859D00110E4F4A73A01C971737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

SepetExpress_Kurye.apk.crdownload

Path C:\Users\Admin\Downloads\SepetExpress_Kurye.apk.crdownload
Size 4.2MB
SHA256 8a7de9b50ff7afdb649f005d783f6533a9bb44e5967f80a626dbcd641b9ae3b0
MD5 64ea563f7c42135f740a5631b8674c18
SHA1 081abd948114f5c1b55b0eec57b8587732b44d05
SHA512 86c51ff41e3c9821eb3352c752b1246d8f146253071ea5ff1f5248e908c660c26db4586a57a34c5f7bf575ee3b7b5c93c0189cc71226985fe670a0f63f1afaed
SSDEEP 98304:eZHqjGqAbIqSvrFiUhLjdYcu08/6XMe9FVLs97NyVWJQvUKzE:eZH2EUvrFh9lP8kMe97OCuKY
TLSH
T155160242F3E8AE2FCC73C1321BAB173A11468E12C642E7479958B75C6DBBAD44E51BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download