killmbr | 2f0b73f7b24ca742ba085102b0f913d3d8ec8d1943a8df9a13a486556116b8df

Resubmissions

28/10/2026, 01:47

261028-b72lgaxzh16

28/10/2026, 01:44

14/10/2026, 02:50

14/10/2026, 02:44

14/10/2026, 02:38

14/10/2026, 02:32

Analysis

user interaction
yes
max time kernel
703s
max time network
901s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 276KB
Sample261014-db1qeaxwdv
SHA256 2f0b73f7b24ca742ba085102b0f913d3d8ec8d1943a8df9a13a486556116b8df
MD5 406c368f388cbfa7e77b492e845abbcb
SHA1 3c512b66ca5a8b416dff069202e3c24dc4e91a1f
SHA512 bb6d20c287a70d3dd2ac000a0dbab639a220c103af6e9faa2221ff4e542a0b03f629bf7bb7b6d67a7265f29e6ec78a059574bd8dc7e28e02804ac0a8da74908f
SSDEEP 3072:HihWfkzqtqlEIGdcWll1XJg3ROwXCdapJzISrXvJ85MKJZ5:ChWfkzq8qIGdb1XJuOwydaDICYJZ5
TLSH
T169545B726300B03BB813DD90A6BF6E0E3D35E13BDD0A86F89995E960DFD2EB2115521D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

bootkit discovery killmbr persistence ransomware trojan wiper

Malware Config

Signatures

Family: KillMBR
KillMBR is a trojan that attempts to overwrite the Master Boot Record.
wiper trojan killmbr

Detects KillMBR 1 IoCs

resource	yara_rule
behavioral2/files/0x0008000000018786-1020.dat	family_killmbr

Downloads MZ/PE file 2 IoCs

flow	pid	Process
106	1524	msedge.exe
218	1524	msedge.exe

Executes dropped EXE 7 IoCs

pid	Process
5324	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
5112	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe

Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
248	raw.githubusercontent.com
213	raw.githubusercontent.com
214	raw.githubusercontent.com
215	raw.githubusercontent.com
216	raw.githubusercontent.com
217	raw.githubusercontent.com
218	raw.githubusercontent.com
247	raw.githubusercontent.com

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	MEMZ-Destructive.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	notepad.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mspaint.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mspaint.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mspaint.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MEMZ-Destructive.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MEMZ-Destructive.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1524	msedge.exe

Checks SCSI registry key(s) 3 TTPs 8 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	svchost.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	MEMZ-Destructive.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{5219D3F6-9364-4462-9C84-252D65B3F021}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
5112	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
5112	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
5112	MEMZ-Destructive.exe
5112	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
5112	MEMZ-Destructive.exe
5112	MEMZ-Destructive.exe
5808	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
4312	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
1200	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe
5688	MEMZ-Destructive.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1544	MEMZ-Destructive.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2240	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2240	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 62 IoCs

pid	Process
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe
3048	msedge.exe

Suspicious use of SetWindowsHookEx 33 IoCs

pid	Process
4104	notepad.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
796	mspaint.exe
796	mspaint.exe
796	mspaint.exe
796	mspaint.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
6636	mspaint.exe
6636	mspaint.exe
6636	mspaint.exe
6636	mspaint.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
7316	mspaint.exe
7316	mspaint.exe
7316	mspaint.exe
7316	mspaint.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe
1544	MEMZ-Destructive.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3048 wrote to memory of 4340	3048	msedge.exe	89
PID 3048 wrote to memory of 2420	3048	msedge.exe	90
PID 3048 wrote to memory of 1524	3048	msedge.exe	92
PID 3048 wrote to memory of 2420	3048	msedge.exe	90
PID 3048 wrote to memory of 2420	3048	msedge.exe	90
PID 3048 wrote to memory of 4800	3048	msedge.exe	93
PID 3048 wrote to memory of 4800	3048	msedge.exe	93
PID 3048 wrote to memory of 4728	3048	msedge.exe	94
PID 3048 wrote to memory of 4728	3048	msedge.exe	94
PID 3048 wrote to memory of 4728	3048	msedge.exe	94
PID 3048 wrote to memory of 4620	3048	msedge.exe	95
PID 3048 wrote to memory of 4620	3048	msedge.exe	95
PID 3048 wrote to memory of 4620	3048	msedge.exe	95
PID 3048 wrote to memory of 364	3048	msedge.exe	96
PID 3048 wrote to memory of 364	3048	msedge.exe	96
PID 3048 wrote to memory of 364	3048	msedge.exe	96
PID 3048 wrote to memory of 6008	3048	msedge.exe	97
PID 3048 wrote to memory of 6008	3048	msedge.exe	97
PID 3048 wrote to memory of 6008	3048	msedge.exe	97
PID 3048 wrote to memory of 6072	3048	msedge.exe	99
PID 3048 wrote to memory of 6072	3048	msedge.exe	99
PID 3048 wrote to memory of 4916	3048	msedge.exe	100
PID 3048 wrote to memory of 4916	3048	msedge.exe	100
PID 3048 wrote to memory of 3172	3048	msedge.exe	102
PID 3048 wrote to memory of 1052	3048	msedge.exe	105
PID 3048 wrote to memory of 1052	3048	msedge.exe	105
PID 3048 wrote to memory of 5808	3048	msedge.exe	106
PID 3048 wrote to memory of 5808	3048	msedge.exe	106
PID 3048 wrote to memory of 5808	3048	msedge.exe	106
PID 3048 wrote to memory of 3676	3048	msedge.exe	107
PID 3048 wrote to memory of 3676	3048	msedge.exe	107
PID 3048 wrote to memory of 3676	3048	msedge.exe	107
PID 3048 wrote to memory of 5296	3048	msedge.exe	108
PID 3048 wrote to memory of 5296	3048	msedge.exe	108
PID 3048 wrote to memory of 5296	3048	msedge.exe	108
PID 3048 wrote to memory of 4328	3048	msedge.exe	109
PID 3048 wrote to memory of 4328	3048	msedge.exe	109
PID 3048 wrote to memory of 4328	3048	msedge.exe	109
PID 3048 wrote to memory of 1208	3048	msedge.exe	111
PID 3048 wrote to memory of 2760	3048	msedge.exe	112
PID 3048 wrote to memory of 1912	3048	msedge.exe	113
PID 3048 wrote to memory of 2964	3048	msedge.exe	114
PID 3048 wrote to memory of 2964	3048	msedge.exe	114
PID 3048 wrote to memory of 2964	3048	msedge.exe	114
PID 3048 wrote to memory of 5752	3048	msedge.exe	115
PID 3048 wrote to memory of 5752	3048	msedge.exe	115
PID 3048 wrote to memory of 6036	3048	msedge.exe	117
PID 3048 wrote to memory of 6036	3048	msedge.exe	117
PID 3048 wrote to memory of 6036	3048	msedge.exe	117
PID 3048 wrote to memory of 3476	3048	msedge.exe	118
PID 3048 wrote to memory of 3476	3048	msedge.exe	118
PID 3048 wrote to memory of 4668	3048	msedge.exe	119
PID 3048 wrote to memory of 2908	3048	msedge.exe	120
PID 3048 wrote to memory of 2908	3048	msedge.exe	120
PID 3048 wrote to memory of 1528	3048	msedge.exe	121
PID 3048 wrote to memory of 1528	3048	msedge.exe	121
PID 3048 wrote to memory of 1528	3048	msedge.exe	121
PID 3048 wrote to memory of 3840	3048	msedge.exe	122
PID 3048 wrote to memory of 3840	3048	msedge.exe	122
PID 3048 wrote to memory of 3840	3048	msedge.exe	122
PID 3048 wrote to memory of 1188	3048	msedge.exe	123
PID 3048 wrote to memory of 1188	3048	msedge.exe	123
PID 3048 wrote to memory of 1188	3048	msedge.exe	123
PID 3048 wrote to memory of 4472	3048	msedge.exe	124

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffdea79c188,0x7ffdea79c194,0x7ffdea79c1a0
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,5980735157527891180,7031746497493527493,262144 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,15523185778481491079,7309701787776247908,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,17048887138300838283,11757879318422252841,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:13
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,17340910146956688793,4473174515922245771,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3340,i,13987374031082365591,4228479738665627022,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,8562043885996772197,15212469183486755986,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,3164497879920682224,2925428810085857124,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,16891760621681524931,10160648389996223528,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,623149281735356849,15300713655935027839,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,12678751635674542256,3254858751256220627,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,12678751635674542256,3254858751256220627,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,13113437990274583783,1649560340977726887,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:14
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3656,i,14624591626760023324,15890226946674243551,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3680,i,10806255230197817079,5577526414211353262,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6740,i,10412338496591889205,7341470795899049950,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6156,i,18367284036714767840,14251845079641456635,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,10307914437711709889,14364266468056388806,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,16809630053318491401,12128725059308919721,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6976,i,688959955763357104,5901696649181555574,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:14
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5328,i,10325104661593882604,9154653209843328943,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7184,i,16177889780104447082,5903888359487385977,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:14
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7604,i,7344696568036870314,15773519601856092370,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7544,i,10140367791261079345,15011198112908817709,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:14
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7284,i,6592330504934371195,5102554200243850111,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,2715136115722619063,11890019182845200744,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=804,i,15713122513136460801,10861749639331261237,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7784 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7028,i,5369096397970021841,17266205501132189451,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7684,i,8173619432680298095,6219973282912659411,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,11563569400427223157,733681453152213483,262144 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7468,i,1101759127431862671,5484470296291132931,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8284,i,9425463821130253289,16917994943719428139,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8272 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8440,i,5257294609188480037,14270465955049527533,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:14
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7864,i,6744104205648618068,2428585643262621387,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,2728619823130922694,5787729797588337901,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8824,i,4975494577425442721,4798678878166637652,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8808 /prefetch:14
  2⤵
  PID:2016
- C:\Users\Admin\Downloads\MEMZ-Destructive.exe
  "C:\Users\Admin\Downloads\MEMZ-Destructive.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  PID:5324
- - C:\Users\Admin\Downloads\MEMZ-Destructive.exe
    "C:\Users\Admin\Downloads\MEMZ-Destructive.exe" /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:4312
- - C:\Users\Admin\Downloads\MEMZ-Destructive.exe
    "C:\Users\Admin\Downloads\MEMZ-Destructive.exe" /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:1200
- - C:\Users\Admin\Downloads\MEMZ-Destructive.exe
    "C:\Users\Admin\Downloads\MEMZ-Destructive.exe" /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:5688
- - C:\Users\Admin\Downloads\MEMZ-Destructive.exe
    "C:\Users\Admin\Downloads\MEMZ-Destructive.exe" /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:5808
- - C:\Users\Admin\Downloads\MEMZ-Destructive.exe
    "C:\Users\Admin\Downloads\MEMZ-Destructive.exe" /watchdog
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:5112
- - C:\Users\Admin\Downloads\MEMZ-Destructive.exe
    "C:\Users\Admin\Downloads\MEMZ-Destructive.exe" /main
    3⤵
    - Executes dropped EXE
    - Writes to the Master Boot Record (MBR)
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    PID:1544
  - - C:\Windows\SysWOW64\notepad.exe
      "C:\Windows\System32\notepad.exe" \note.txt
      4⤵
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:4104
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
      4⤵
      PID:5668
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
      4⤵
      PID:4588
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
      4⤵
      PID:1624
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
      4⤵
      PID:1100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
      4⤵
      PID:5300
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
      4⤵
      PID:3384
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
      4⤵
      PID:2760
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=stanky+danky+maymays
      4⤵
      PID:2408
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
      4⤵
      PID:4304
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
      4⤵
      PID:7068
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
      4⤵
      PID:2448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
      4⤵
      PID:6216
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
      4⤵
      PID:6232
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
      4⤵
      PID:1748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
      4⤵
      PID:6940
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
      4⤵
      PID:6724
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
      4⤵
      PID:6284
  - - C:\Windows\SysWOW64\mspaint.exe
      "C:\Windows\System32\mspaint.exe"
      4⤵
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:796
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=g3t+r3kt
      4⤵
      PID:6152
  - - C:\Windows\SysWOW64\mspaint.exe
      "C:\Windows\System32\mspaint.exe"
      4⤵
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:6636
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe"
      4⤵
      System Location Discovery: System Language Discovery
      PID:7160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
      4⤵
      PID:6860
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
      4⤵
      PID:7428
  - - C:\Windows\SysWOW64\mspaint.exe
      "C:\Windows\System32\mspaint.exe"
      4⤵
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:7316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
      4⤵
      PID:8012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
      4⤵
      PID:8076
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
      4⤵
      PID:6884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus
      4⤵
      PID:7484
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
      4⤵
      PID:4488
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
      4⤵
      PID:6156
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
      4⤵
      PID:5580
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
      4⤵
      PID:7996
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free
      4⤵
      PID:6904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
      4⤵
      PID:7276
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
      4⤵
      PID:6744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
      4⤵
      PID:2732
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe"
      4⤵
      PID:3672
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
      4⤵
      PID:7756
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
      4⤵
      PID:9140
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
      4⤵
      PID:6492
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=stanky+danky+maymays
      4⤵
      PID:2576
  - - C:\Windows\SysWOW64\explorer.exe
      "C:\Windows\System32\explorer.exe"
      4⤵
      PID:8360
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
      4⤵
      PID:8488
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
      4⤵
      PID:6744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
      4⤵
      PID:8440
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
      4⤵
      PID:8808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3836,i,10245647536701251258,14757503436892514305,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8864 /prefetch:14
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8412,i,2724011711257655741,15944163037107195598,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8808 /prefetch:14
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8612,i,10782450194176265634,13498807014059285613,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8616 /prefetch:14
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6056,i,15463177324097475772,773403648199891352,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8296 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8352,i,3609807254483889047,3138433802833490944,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=5780,i,3568155672063363473,16106017277460597142,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8884,i,7351763537473332361,7605761057090899512,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8848 /prefetch:14
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8884,i,7351763537473332361,7605761057090899512,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8848 /prefetch:14
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=2640,i,14492666393313170649,16419359681066263918,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7844,i,3617246149592693466,7025111394818261321,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7484 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9088,i,934324251304416035,3250444574169934168,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8944 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8372,i,1796804766792347201,16427167861662901184,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9104 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7024,i,1098370978715840441,6968404307239790856,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9100 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8752,i,4912594524227303646,18415721473522320862,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8204,i,7627362869722451177,14929003301738498437,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8688 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8908,i,1684717883094004031,2126229582321606507,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8732 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9524,i,9725156098141142097,4506199402178943757,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9632,i,18163867298597572916,7977427195999221861,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9644 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9768,i,6872936930245192022,4550401087442680295,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9508 /prefetch:14
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=6012,i,16967498284914526785,7287862399674904338,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9324 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8344,i,9915565226947192090,15461978105271172619,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9864 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9640,i,11096304683889957034,2277007871109948971,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9684 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9696,i,13277907717282280254,10318493976506460988,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9668 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9720,i,14308492034424633326,9252962024496211539,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9904 /prefetch:1
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9912,i,9490150217597513619,9789895172597176259,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9732 /prefetch:14
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9988,i,16560975574096932691,11572519535013918044,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10028 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=9840,i,9465470688898603468,2621300267256280408,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9752 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9996,i,12595907903596436603,8773486200904908859,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9740 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9852,i,14384902968286575116,1168633938888693995,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10224 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10160,i,9891740648390233861,11379018163919228091,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10268 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9500,i,8991561497839661724,2540909420030476774,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9712 /prefetch:14
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=10232,i,1148825388644943946,9821791219349976640,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10212 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=10180,i,3060240499058051573,18343023622107662472,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10560 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=9884,i,12138375386720461862,17039933651216437441,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10080 /prefetch:1
  2⤵
  PID:7084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=10788,i,8678988564897552390,7658189137822748083,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10784 /prefetch:1
  2⤵
  PID:7160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10828,i,15027458231225664671,6824120871337840726,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10640 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=10556,i,4146896090521774151,5308722312601112035,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=9740 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=6188,i,15957886576364657576,14200661897275228541,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=10912,i,11514704061797850682,1685242490373410056,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10908 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10488,i,5662331154452814585,8019744919283056102,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10368 /prefetch:1
  2⤵
  PID:7096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=10392,i,4869822908194986243,6338887739295828599,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10984 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=10896,i,9889287798543206308,7163984547103224619,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=10284,i,653204017655992338,3513369740927600557,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11192 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=11168,i,17195972547154848832,13933861675618827437,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11460 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=11356,i,9515791729323108146,1074136156907740458,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11052 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=11396,i,17489471419740590475,9061686840965232628,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10784 /prefetch:1
  2⤵
  PID:6876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=10852,i,5924761959856569867,4308997062250683387,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11004 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=11584,i,15147001838622877003,8748619999573164871,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11588 /prefetch:1
  2⤵
  PID:6164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=11680,i,14360948941658986582,17012035445968902164,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11720 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=11356,i,17738732488460152330,10398438959617982276,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11152 /prefetch:1
  2⤵
  PID:6696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=11680,i,5098358517973528205,470494285286899404,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10820 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=10888,i,9128340162614531383,14768873859169762324,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10156 /prefetch:1
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=11964,i,18319816179924179996,780308588380733136,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11976 /prefetch:1
  2⤵
  PID:6948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=12108,i,3331052449745426149,11086399042590675955,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11960 /prefetch:1
  2⤵
  PID:6796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=11592,i,3210562048341329886,13430174194876450497,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10364 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=11588,i,8113584916322031021,3861512558169356845,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11240 /prefetch:1
  2⤵
  PID:6172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=11356,i,884960261355437503,17868798779646703796,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=10864 /prefetch:1
  2⤵
  PID:7444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12412,i,3554022176062474839,15748854373930891830,524288 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=12448 /prefetch:14
  2⤵
  PID:7472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=12592,i,18151705762443996347,8980738669090443831,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=12608 /prefetch:1
  2⤵
  PID:7560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=6752,i,7911414401188287777,2339617698328324667,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:8092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=3444,i,9548991566073065488,2770197688902573164,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13048 /prefetch:1
  2⤵
  PID:8180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=13216,i,5091450302005209604,6280038639660780109,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13220 /prefetch:1
  2⤵
  PID:7648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=12728,i,2206747143501621291,16563703003939065941,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13248 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=13148,i,7026459830039484406,12839957993314150039,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13280 /prefetch:1
  2⤵
  PID:8044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=12504,i,247943202232066156,10082504501930973876,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=12492 /prefetch:1
  2⤵
  PID:6524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=12600,i,11382252653964629453,18349931847591751230,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=12632 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=12928,i,13356810767147737635,16900496462476749791,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=12852 /prefetch:1
  2⤵
  PID:7388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=13024,i,4984794618584810320,8047246300122307948,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=12892 /prefetch:1
  2⤵
  PID:7376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=12700,i,4618645709313877510,13113058534622879795,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:7452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=7736,i,3114904158146894166,13332550777588296025,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7740 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=7788,i,7492364035695983708,5826943446982509903,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:1
  2⤵
  PID:6864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=12248,i,10408054398501794245,16256952718095123431,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=11900 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=11856,i,16833603942285281166,10468220556888080152,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13388 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=6556,i,8626863769303617810,16406042692345006505,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:8188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=8088,i,7199984179080224787,13122325927120614590,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:7476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=12704,i,6837436485253292884,3853957668795047234,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=7748 /prefetch:1
  2⤵
  PID:6344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=13548,i,17536858043096774817,8737375881149907217,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13568 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=12832,i,14953143891081713640,8899776482796080351,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=12932 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=8088,i,13863925989064475123,12403861508137022055,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13688 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=13384,i,17279771196651417264,2951625132726030576,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13888 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=13664,i,5185436144514171062,16269259726011760316,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14012 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=13748,i,8623919493283319925,11766970562602711596,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=13588 /prefetch:1
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=14100,i,9285126658723213608,12810015217687885647,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14092 /prefetch:1
  2⤵
  PID:7664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=13624,i,17857417150961542636,7639816345248362437,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14044 /prefetch:1
  2⤵
  PID:6332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=14316,i,4991093857446965094,12384083940323935197,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14000 /prefetch:1
  2⤵
  PID:7684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=14484,i,5967001336921781047,6252385326891702246,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14476 /prefetch:1
  2⤵
  PID:9156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=14452,i,15814069282243963684,9462933898871731089,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14520 /prefetch:1
  2⤵
  PID:9204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=13764,i,5379749870543372073,15492324657443996194,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14380 /prefetch:1
  2⤵
  PID:8736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=14340,i,13511688360632820021,16148089148463938739,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14640 /prefetch:1
  2⤵
  PID:8840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=14812,i,16910650723515527699,335132803289035584,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14836 /prefetch:1
  2⤵
  PID:8716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=15004,i,15514558694572976623,14640943360417478638,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=15016 /prefetch:1
  2⤵
  PID:8916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=14112,i,15410066645998178591,1863683227508877960,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14360 /prefetch:1
  2⤵
  PID:7732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=15152,i,13668399855096198925,11000296480487309787,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=15164 /prefetch:1
  2⤵
  PID:6340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=15056,i,15756229507508149365,1444384242371665626,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=15040 /prefetch:1
  2⤵
  PID:8220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=15052,i,6620951046937837672,13654705102032607203,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=15024 /prefetch:1
  2⤵
  PID:9168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=15000,i,9978663156446895960,1038058611121968657,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=15144 /prefetch:1
  2⤵
  PID:8788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=14588,i,3018998304697900386,1339417601175348239,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=15252 /prefetch:1
  2⤵
  PID:8268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=15124,i,300149186116642106,6290498674910938415,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=15248 /prefetch:1
  2⤵
  PID:8300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=14400,i,12405732719734688275,17279843697752676235,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14128 /prefetch:1
  2⤵
  PID:9008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=15076,i,13324921390049658719,11481208102636664466,2097152 --field-trial-handle=2324,i,15930240083414670574,13145177348127047480,262144 --variations-seed-version --mojo-platform-channel-handle=14408 /prefetch:1
  2⤵
  PID:6420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5648

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004A8 0x000000000000042C
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2240

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
- Checks SCSI registry key(s)
PID:2216

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:7768

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:6024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0243aedd-dfb3-45e5-a738-6147f9ef88c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0243aedd-dfb3-45e5-a738-6147f9ef88c5.tmp
Size 42KB
SHA256 168fe4ac449b2af88fb1c962481c940150d8f158873b717ca8cd9042c5a35ac2
MD5 e6b473f43c7af4e358b5aca869dab125
SHA1 38fe480e585431fbaa283afbb0f0814d5b6c9b36
SHA512 e8e8b0c1ecbd2bf56bf64ce8deb9560425f67f61b1703aead4b0c0428524b0ec68a430b53945e651c70acbae4301864d6502f61d41297c2f7a8fc40493b9a57f
SSDEEP 768:1FSv3SwgSoOcwOtNCQr5fgGM1TnXMqOaTykJECI:mv3HAfgt1TnxOsyQE
TLSH
T1671359F299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

04826acf-b365-415b-a50c-858295fd301c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\04826acf-b365-415b-a50c-858295fd301c.tmp
Size 42KB
SHA256 70c9d236af3bd9df73af8517d2beeda5adc2672940a6ced4f70ebbec73638342
MD5 aba4cda4685925125b24729b340f4bb7
SHA1 4d55b90259851b4b3ac4ea6e1723dce93b72d29c
SHA512 87b48bc886c255a20cbb41480c5761f5d0dab2b17d6bb317d7cbe8844b626b6a4de1c96fa203ef15be4c90bded8e4ac7b4b144eef12f46fc623cb505981273f9
SSDEEP 768:1Fwf3SwgdoD+wOtNCQd5fgGM1TnXMqOaTykJECI:8f3dSfgt1TnxOsyQE
TLSH
T103135AF299D39932E8AE8787A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c2ed789-e3ec-49f2-bcda-e0127d1464ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0c2ed789-e3ec-49f2-bcda-e0127d1464ba.tmp
Size 41KB
SHA256 385d85e159aa60865db37ed25a0f611bd1476ba84b5a892a9d63741a564e3161
MD5 e6d12cf1ad691f606af30962851960a7
SHA1 43b760792ca990eb236c305698022f027459a048
SHA512 1e4f392fca6987ec6030dd4461b1e3eaba27bbb370379164c405477b1b00a1a38be954eb3c1789ae0fc82f551acbdc5c7989b0daff018ab4ff8cdcfa47f3d6ee
SSDEEP 768:1F8P3SwgjokkwOtNCQa5fgGM1TnXMqOaTykJECI:4P3mFfgt1TnxOsyQE
TLSH
T1501359F299D79932E8AE8787A33D6D015EFDC167B5841998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0df23a02-ead9-4c9d-b79d-5d7af847f83c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0df23a02-ead9-4c9d-b79d-5d7af847f83c.tmp
Size 41KB
SHA256 f461b1fde16d16fb7dc22575a2d92127e340129273d125e1242e9d1278c2b5ab
MD5 62458095e09a02f72b9c61c1e3be2970
SHA1 93c9558b58745ce77a08d263e022fbfb7fda5b70
SHA512 86eda511646281f15ecc13ba75ad26b63b3a42631281a74031d836578309fe2e46dea565bfb237fe78f7317daf32183f4d390ad3399010ac05c29de1438c30ff
SSDEEP 768:1FU+3SwgToKUwOtNCQa5fgGM1TnXMqOaTykJECI:w+3o1fgt1TnxOsyQE
TLSH
T12E1359F299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14db6fa7-4221-4a91-a564-71c3b856e142.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\14db6fa7-4221-4a91-a564-71c3b856e142.tmp
Size 392B
SHA256 435383522305146373f302d780d603ec4517cbb71c801257b9fdfe8790b017ff
MD5 2c43dad999c5c7b7e1b0b247943d1cb0
SHA1 e6aef054968bbfcbbf882cc2d21d9ee039067275
SHA512 b4f13d82b61e022f9fd9abe5c82b0789453f5c637e97a1b848871738946db5711cc6ce4396ff5ab48f30567606c2a2c99a81cf9c8ce27eb646a4e29a2a1c2cf9
TLSH
T172E0C553C31551EED83C877040874B387FA7A47123A3070A5E2049683C263613F22ED0
MD5 SHA1 SHA512 TLSH

Submit Download

15168c7f-2c52-4106-9808-8ed4eb135262.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15168c7f-2c52-4106-9808-8ed4eb135262.tmp
Size 392B
SHA256 0745301a3ebeea4b595de4cc84aed3e9f893498d2f49654d5a155b40675f9e35
MD5 8b9da1532e03a2c5a863700708c972c1
SHA1 3f2adf5b10d2c76eceadf7abd87f5e28ec317e9b
SHA512 c0a1f28370d1fb7e6502224b88afdcf495bbf2ecbd08784e51f001674b9f09412ae77822efc4580eb279893200f51f60587c166909447b2ff66c5fb432bc8bd4
TLSH
T168E07D02872890AFD8B8D33906C30F74A7C1C0B123B30358096C647CFE4D75A1C07AD0
MD5 SHA1 SHA512 TLSH

Submit Download

15b0913f-f7ef-4e16-a412-76567dccf32c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15b0913f-f7ef-4e16-a412-76567dccf32c.tmp
Size 41KB
SHA256 a4fafbbb1de221315031fe4006fc3357a3dcbb467e3e5f5d90caf76e5230363c
MD5 58a7a68a1fcdcc0c7246ed2357e8a59e
SHA1 1403d517b471289dcab37d72fbe0bd2f245865ab
SHA512 5760a38b8c3119fd7c9c1323cf7259b5dc43c6db31d97b846ad9a7dcb4d6322067d2e0b155e7e33d9bcdea796166bca75cab12a5378bdcec5535bcedc6816a9a
SSDEEP 768:1FRO3Swgvoy4wOtNCQn5fgGM1TnXMqOaTykJECI:1O3Owfgt1TnxOsyQE
TLSH
T14A1359F299D39972E8AE8787A33D6D015EFDC167B5841998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

175e2ea1-f834-43a6-9c44-8fa7720fed13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\175e2ea1-f834-43a6-9c44-8fa7720fed13.tmp
Size 42KB
SHA256 f64db4ccef37ae5172ce71b76c5a6660d87a820f64525f3eb7176543739dd23b
MD5 80ba8eacab04e47b543bd186681b57fa
SHA1 90e67a374ce84ffbf41fd8c5b86d010370e7ef67
SHA512 3d207399bf55240c0459a40057ffe3a0a02a49e0124a8de48b38b0cf87688dcce53242838ad88ccb053750d0f835027acaaf3746da29e3f7c8b8ccc5f6817310
SSDEEP 768:1F253SwgzookwOtNCQG5fgGM1TnXMqOaTykJECI:q53CJfgt1TnxOsyQE
TLSH
T1DF135AF299D39932E8AE8787A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

199e1b5e-ca07-402b-a889-d84c1f7b468a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\199e1b5e-ca07-402b-a889-d84c1f7b468a.tmp
Size 42KB
SHA256 65973d605bb561319e9f43a6b63610c85bf1ca75fd25b69cc5bed58844f91baa
MD5 304261c52879af2becbddaf5f52ebc76
SHA1 da1bca69deee20b9f969aef832fd2b3812b59df4
SHA512 56ce03b2c7c14ff564b3353af391210c099846f3755d8fcb62a8c264dd24c137e76a8bef27a4bf7072f31ba3ac6c96cd1bba1cfc46928c7024463a486460f1ca
SSDEEP 768:1FBR3SwgFo5+wOtNCQp5fgGM1TnXMqOaTykJECI:tR3Lufgt1TnxOsyQE
TLSH
T1861359F299D39932E8AE8787A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1fa5bdb9-e939-4c7a-b2d6-466a74c58224.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1fa5bdb9-e939-4c7a-b2d6-466a74c58224.tmp
Size 392B
SHA256 c746e90656380524208ee72503f7772e1be4ee5e0391554e35bb924b72cda129
MD5 d13883d9877ce44a20343ea7424694ec
SHA1 d2feed9cc493e1af62b9e85ebfb6e69a3184a785
SHA512 308c13dfa612b95e4deaa055d3dad2b0f4ccdf436bbd1c6734e61db668168ec5c84b3e5eb664f46e299971cb11abb8c5ad73b19e4dfb747363e6d0c4e99bccc1
TLSH
T1B0E00203D31451ABC438833001C71F283F72C86003A3070A1A7009AC3C387303D24E40
MD5 SHA1 SHA512 TLSH

Submit Download

21ab7e34-1779-49fb-bb57-fe11e790c0d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\21ab7e34-1779-49fb-bb57-fe11e790c0d3.tmp
Size 41KB
SHA256 371e701530a984d82d8e7280ebbe035b916cafcff36c3bee40e2fa0f4038182f
MD5 8013462d72e926c8f6e9dd46e0c20d23
SHA1 71377ba02a68427e93699996bfa91ad63c652372
SHA512 2af69687dff59b0bceb058a947697befddd3a00010374fc8be3cb9945d1abc7f42484b742e4d733a40efbe84a368e5f34c90698822217c92084de65f145adc23
SSDEEP 768:1F293SwgIoJCwOtNCQ/5fgGM1TnXMqOaTykJECI:q93Acfgt1TnxOsyQE
TLSH
T1601359F299D39972E8AE8747A33D6D015EFDC167B5841994B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23d3f21b-11f7-452f-9034-513d063e2224.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\23d3f21b-11f7-452f-9034-513d063e2224.tmp
Size 392B
SHA256 ffda587d3dfaad92bd7a877344a86ac5c2e5445afa24acb2188ae68f4d0a9cd3
MD5 9869c5c77a3999665097cb7ea9446b9d
SHA1 9d03eb6a639c76de4d41e417516694718a37dec8
SHA512 4fad8721e42eeaf6cfb82688eeb422f8d532062ace3aca309c9f59e721f42f90bceeb7c61871bf157eb01080c02afeda977722efd3cbb7c911aeac68eff031b4
TLSH
T16AE06C06C32411ABD83C873084C70B687FB6A06002A3070A5A2609683D267213F22E90
MD5 SHA1 SHA512 TLSH

Submit Download

245a922d-192e-41f5-9a88-00e2e92487d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\245a922d-192e-41f5-9a88-00e2e92487d7.tmp
Size 392B
SHA256 d295fb250341ad786ac54f5165d24b6ff5d191545536c3b0058e3bc1f49220d3
MD5 c0c3a2d2dcd619b94106cfb697965b8f
SHA1 e73cde44f9e09b5b8fef91e9e1d799132d9151dc
SHA512 f757303c82878d6ed287745b30c10233e8a4e30a47fb8cf858447fadf263ad79df7e8ce6aedd6b596e48a1c01e74377c2bac250c08c2c0287a916a00dc0705e1
TLSH
T1FFE0C553C31551AED83D877045C74B387FB7A4A153A3070A5E2049683D667613F22E90
MD5 SHA1 SHA512 TLSH

Submit Download

269f64ab-1d6c-4b33-a114-f5c8df55f9fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\269f64ab-1d6c-4b33-a114-f5c8df55f9fb.tmp
Size 42KB
SHA256 63a1460a0d54a2d4387df8b581492bc5df67adc630f146f12b03aef8792387aa
MD5 968ece6c6b273f34427fd676180c2278
SHA1 6c783a2539531055543a7ec2615c10cbce3434ee
SHA512 a11be7b845bb2048cdc03ccc2b5c42fb1ebfd7763dcae1ea6753f4c476ce04365da2cf1ef29629319c855e0d551a7d3a9ba2a30b4428e9d71c3f2efa9b6347de
SSDEEP 768:1F/z3SwgooiuwOtNCQ05fgGM1TnXMqOaTykJECI:zz3Xrfgt1TnxOsyQE
TLSH
T17C135AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c0abc80-a59d-4a62-a866-f19a56c68a21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c0abc80-a59d-4a62-a866-f19a56c68a21.tmp
Size 392B
SHA256 4f8145eb5112ec1786008e44834f9d729c36c4ec8d1c9df6c5504aaa463ccffb
MD5 4e876b7ee3f1ee3d8442f80a5a72df2b
SHA1 26719d51dea1d34062d983b1f5bfa9bd12a58578
SHA512 6a43c31c898fe1dc7c141d9504fac8b9f282a9b216ca7437e876e745718f79e1044c271d95fdb066d7af186f431f8401ec20f4b3da415e214559e1291945cfc9
TLSH
T1EDE02612872891AFC878933806C30F74A781C0A123B3039445A8647CFE4975A2C03ED0
MD5 SHA1 SHA512 TLSH

Submit Download

2e1577b3-6e86-4f79-8edc-e5c69366301a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2e1577b3-6e86-4f79-8edc-e5c69366301a.tmp
Size 392B
SHA256 a2c2a61f349b0adb00f0f7e1a5eb04aa9b22d1ac87bf469174ed67027ea8462d
MD5 192e74cbc4709a795abf4c86779a997c
SHA1 61c0b02dce83cb3c9a30091ca4d397074fa9f8f4
SHA512 f9211b770d1085d1fddf18800d18fb5477315815567731a32e05676a07bf83965e3064c47f8b1cd681c1c9de9c2701600d90538db94aff050f13a2bd7054a1c7
TLSH
T1F3E09207C32451AFD83C833084C74B787FB6A06106A3031B5B26096C7D797213F22E90
MD5 SHA1 SHA512 TLSH

Submit Download

36042bec-8a14-44bb-ade7-8903cb1ed923.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36042bec-8a14-44bb-ade7-8903cb1ed923.tmp
Size 392B
SHA256 24c95954c83a1f5b121babad0511c58326a6f37386714791fa6d9cfb91e4ee4c
MD5 ff124d8aad1674645f57a167bb47c97c
SHA1 b45aebcb7194cb2c80b910f0369ff6ba2c9ca14a
SHA512 746ff5fae905152d3dede7ab3a9ea751696a5308f71b97dc09c225382c09ebc248bdf49c14efc641b76cff1868efea5ffba5e52573111c7b08b0ffba1768f89b
TLSH
T1C2E01706C32852ABC478C33141C70FA86FA594220252030A97750A5CBD777662F26D91
MD5 SHA1 SHA512 TLSH

Submit Download

381b34d1-20ea-46ce-9eab-399706617077.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\381b34d1-20ea-46ce-9eab-399706617077.tmp
Size 42KB
SHA256 c1c76805a8b2c041a7dc10d5562c92f98aae6d9253e62659faa168ad1c96049f
MD5 d4ec476857ec5cdca66329c117efc341
SHA1 8be36a7259093aa71d5629f9351e3b4bd6e422f7
SHA512 38905734a0653c09e598cb6cde92577b058d41b295b692df911d44dafb8818f889858841a91a2799fd5dc416c50cad28524a41f5a44eea0dd0dd195ebfcb9194
SSDEEP 768:1F963SwgloMswOtNCQU5fgGM1TnXMqOaTykJECI:R634/fgt1TnxOsyQE
TLSH
T1BD135AF299D39932E8AE8747A33D6D025EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43cdc9e1-c058-437c-8e2b-97597e8a7294.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43cdc9e1-c058-437c-8e2b-97597e8a7294.tmp
Size 392B
SHA256 88cad5be4911b48f980dc56ea0fd5de29534de8e98b8c69c32eb1939589b3df0
MD5 41808220d416fcabefa9c060ae91ba89
SHA1 fe1c19394e573b58869a5ae2389a7c127ebe5ab7
SHA512 5dfb32b87abecd1513d1f54473f5066ec5936cf647bd39b49a6f4d4af1747d450690a9945733c51e800d3e0f8f1eef47dd0eb80df558c435401039ca8713aa30
TLSH
T1CBE09E16C32551BBD43C873455C74F7C7FB6E021466603465B260D6C7D367603F22E90
MD5 SHA1 SHA512 TLSH

Submit Download

45a16e4b-6b83-4f61-bd46-9e66bcf41195.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\45a16e4b-6b83-4f61-bd46-9e66bcf41195.tmp
Size 392B
SHA256 51222f2d6b37e61c1480150ada9a5053f93c9660a3ae28103281050dcbe85716
MD5 9c64110c7a7b8cf1f6e67b1bf25729ef
SHA1 d3d5c55d8cdbc980a31e03c513d0350330643cec
SHA512 220660cfc139064767c7ff2a259fd533f18d626daf38c0ae6dd26cb7f901940b15298ec675524808eb46dc4f849ca28f02f6c06b74011cdf0f0fa42c7f92389a
TLSH
T1A6E09E16C32952BBD43C873195C74F7C7FB6E021466603064B664E6C7D767603F22D90
MD5 SHA1 SHA512 TLSH

Submit Download

45f35114-c280-46e9-8644-c7ae10f35ad7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\45f35114-c280-46e9-8644-c7ae10f35ad7.tmp
Size 42KB
SHA256 540d17054588b80d39a9eb3d142c666e386f570b979f9956747c4836c3cb2bd8
MD5 ee630b03b09aaecb7b4502f46fff0c3b
SHA1 4e53964993168c7495074f738f5324222e34133b
SHA512 50223f29ba4a115bd2e3bfdc8f02dc55c16b91ef03e900bbf554fe8e5383fd41942cb6fd9537f4755b2deb15cc4e8fb1d1e38d0a7148a7e47abd75b13542bf3d
SSDEEP 768:1F+M3SwgUoz+wOtNCQo5fgGM1TnXMqOaTykJECI:CM3C7fgt1TnxOsyQE
TLSH
T187136AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e74ba04-14aa-46d4-b69a-1f969f097a7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e74ba04-14aa-46d4-b69a-1f969f097a7a.tmp
Size 42KB
SHA256 bc00ba3c62ba950d3691a94c8c166f05336f225855d58891a50fde09d5e3ae35
MD5 acb55b51e876a8b6a33230ccebd2395e
SHA1 6e498d441170592a8def88d5dfe6fb2bccaa3b02
SHA512 8180be2f6e69171e1b4e4b0053da608fb066b47ae0886fd249e3c547a2d3f8b1202e3933d5b937329ccb70402483127d3683b19c76ddf7f18737bd71c711b160
SSDEEP 768:1FeC3SwgQo/ewOtNCQa5fgGM1TnXMqOaTykJECI:qC3+Ffgt1TnxOsyQE
TLSH
T11A1359F299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

523d374c-c23c-42c2-bf4f-55950a756f75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\523d374c-c23c-42c2-bf4f-55950a756f75.tmp
Size 41KB
SHA256 662a3e3cf320f5b1631e6bc0c655a014fd07a2dc4ff758cb4f4d519e0e31b250
MD5 55aea9f871a737439be7a2ecba4a7dce
SHA1 16415da9159a46bd139f6a4687508df7e624023f
SHA512 6bfa52c4f65f8f35cf7b2a7cdcf9cb609d7ca8b876680dde4f812156f1f5c337d66045aadd3b5194136ac291bcd2e24843193858973c8edcc6ad353178432564
SSDEEP 768:1FEz3SwgboAUwOtNCQn5fgGM1TnXMqOaTykJECI:4z3icfgt1TnxOsyQE
TLSH
T104135AF299D39932E8AE8787A33D6D015EFDC167B5841998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62e948ab-7fcd-4997-a1c0-a7c8e19b6a54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62e948ab-7fcd-4997-a1c0-a7c8e19b6a54.tmp
Size 392B
SHA256 265d625fbecb2c86bfb82d7ee2af9a4d039401b7e55d38ed4d322ab6292f71b1
MD5 9b184cccf3becf7ffed44dc31f747870
SHA1 a4eb5dfd81316f1f9a1d1735bb7acd903098b596
SHA512 513d02f0aae40c07f5407bab569e49f689bca9758ad5aadabc9e1f87d61b16a7714d732cb7f855c1fa2f8329c04f267e8a2eaba10e4cc64944fd39fbd81d224d
TLSH
T12DE0C206D31965AFD838933012C70F78AFE9C4721363472A457C6A7CFE657692D13E91
MD5 SHA1 SHA512 TLSH

Submit Download

6a103082-21d5-49dd-944f-569971d07fa8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a103082-21d5-49dd-944f-569971d07fa8.tmp
Size 392B
SHA256 f7b715d027a81ac404cabdcba19ffe9c488268082a0715665a567e71038974f1
MD5 981afd7eb476acb8e0839c1399c3c947
SHA1 35dcb823846ebeafed47c77e3e5d69ca92e73fe7
SHA512 59ce43ee3eedef34bb68cfb90d1f29e6d06845aebcf73658fd732e94d11f65962ef77a4beb8a3b1a470cdc99fac1225fb40871738bdc45892eb291b26f560c04
TLSH
T18AE00443D31595EEC83D837001835F256FA7E9B446B64B4B2B704AAC3D3A7203E26EA0
MD5 SHA1 SHA512 TLSH

Submit Download

6a2120d3-7d92-410d-90f8-7b7265d0b7bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a2120d3-7d92-410d-90f8-7b7265d0b7bc.tmp
Size 42KB
SHA256 aaf8bf8b2c3e44e5b71bbe1ff1d208361e35f48ebd7406f64bcc74241ba4f1d4
MD5 485244f7623c3a71d79833048f790c2d
SHA1 3483b939d447af81f5227d365244bcad6ecce790
SHA512 f420c6838bf4096d747b36f3c3d9b2aaf262eeb12d4838dc0e5571fc25f81daf3b93986391d3689ceb30a3df55097e58618c80ff9c61c840669286dccfebde79
SSDEEP 768:1FRt3SwgWoR+wOtNCQ55fgGM1TnXMqOaTykJECI:Nt3Cqfgt1TnxOsyQE
TLSH
T1AD1359F299D39932E8AE8787A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ae21bd6-e21d-4a5e-bae1-8c25bdba2c29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ae21bd6-e21d-4a5e-bae1-8c25bdba2c29.tmp
Size 392B
SHA256 6d375bd2581a9b4381a1a5b32f6bbe28eba66ba93be00d9634b0ebc2e26e1ba7
MD5 cb247a775e235aa2d9a7cbdb5f7c4304
SHA1 83da6d89600a7f4d3bad25fe97c56aca3d11030c
SHA512 342a42c911a5ff9e573032508cae7e94c0d6e6fdb9e166d025ff4d44a60df2603865d4eaa4ebebe06db83a4b1fdc97eb2f5fc74a6531b456b180b17dab9b0341
TLSH
T16AE02642872451ABC8B8E3394AC30F34A3D1C47023B303A84A6C647CFE4972A2C07AA0
MD5 SHA1 SHA512 TLSH

Submit Download

6cabb09e-185b-4552-9bad-26e3e7b8e7e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6cabb09e-185b-4552-9bad-26e3e7b8e7e1.tmp
Size 392B
SHA256 03f914d7b804b9f552e453be7cfe2201f1dfff194cff707fd292944bf90a1eef
MD5 53c800eef3b43cd7687964a37d86ebe7
SHA1 7bd144fe112d74d9cceeb37a889355af9ba5b863
SHA512 40e25d38f7ea204e09eb09eb627b0a072c87675cf21d90112fb62af9db5c44963f07d515b127e142a97eeaf45b92b000ad961b929e52f8fdf8a1caa8fedebb0c
TLSH
T10EE0C702C32842ABD43CC37045CB0FBC6BEAC4220222030A8229096CBE223602E27E90
MD5 SHA1 SHA512 TLSH

Submit Download

6efb0910-d3b3-435d-8b20-5304e0eb8f38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6efb0910-d3b3-435d-8b20-5304e0eb8f38.tmp
Size 41KB
SHA256 98329429d54bfd74dca7f7bc38de6108bfa27db3201e8f3bcf5e46bcb5011529
MD5 774ac32d4292d51fb2d975d7206ba634
SHA1 72af5772b99f80e5ee06a9fda5b4dad6988d81e7
SHA512 04f970ac39c9bdedc5cf6771ae5facddd58dfe863e8a57806c755fe3037203cb6fb3f6893cfdfef484e9daecc3ae56c4ed1bca0103888bbfffd0a8a8c76c0da0
SSDEEP 768:1FQy3cwgnoq8wOtNCQ25fgGM1TnXMqOaTykJECI:Uy3Mhfgt1TnxOsyQE
TLSH
T1A5135AF299D39932E8AE8783A33D6D115EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fe2d979-4e23-4e07-8541-89753494ffe5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6fe2d979-4e23-4e07-8541-89753494ffe5.tmp
Size 42KB
SHA256 de7c50797586e3331bd7afd1be7510d9d0f23106aeedf0aeec362b878cd9e35a
MD5 8230ea5eb4a035ccebcbc8b08f94b76f
SHA1 ba1ece05fbc30a2c9332c9dedee21d59db881e51
SHA512 5ac2688b07d6fa329c58a09f6d97a0d2010c45e368c6c85a70fd576269ab88a88234cad44da6104c7dca51d55e707a86018f5c1829873f16959bf70c7fef9443
SSDEEP 768:1F7z3SwgHomkwOtNCQt5fgGM1TnXMqOaTykJECI:/z382fgt1TnxOsyQE
TLSH
T1AD1359F299D39932E8AE8787A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

710f79b2-d55f-4dc3-b932-b3bc160f68d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\710f79b2-d55f-4dc3-b932-b3bc160f68d8.tmp
Size 392B
SHA256 379fe801440fceaccb0665a0b1beee5c546004c4844688f1d4549d186cad5151
MD5 fa884898d36703d512c526c392cdee28
SHA1 1b71e3421337c5032ab7e5cd320f579959bec7f6
SHA512 56611c74bdb8107c04395f1fff187c52caec66398d2c9eb2ab2ddf2b10710135bd7678e96946577a9c9c6ef6635c0492a8d2b1bc1889d2b51e20805e97bf0b7c
TLSH
T17AE01216D31952ABD53C833056CB0F686BE9D432526203164279596CBD267612E27E91
MD5 SHA1 SHA512 TLSH

Submit Download

7158c5a1-2a38-4f8c-b596-84dd38e2be8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7158c5a1-2a38-4f8c-b596-84dd38e2be8b.tmp
Size 42KB
SHA256 3d65ebfb055618ac2d20f847f46862e7374524a26eb44277428535b8f8c92e3d
MD5 e3dc9908972bf268c2ac8919778e2b31
SHA1 104cae56969d8bdb1a180a228cfcafbeec244661
SHA512 5837b4ee4ec9c9a936dd736af922279f849a7d81083f3799dd2f780ce24c45a7ef5cdb422b2f3bec68659b0f65294a21ddb804d4b8ac7d378e6ddc3007905649
SSDEEP 768:1FeL3SwgLoHCwOtNCQV5fgGM1TnXMqOaTykJECI:aL3rmfgt1TnxOsyQE
TLSH
T1A6135AF299D39932E8AE8747A33D6D025EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71ff17fa-19ed-498e-8d9a-b34f724328e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\71ff17fa-19ed-498e-8d9a-b34f724328e7.tmp
Size 42KB
SHA256 124c2896de53a19dd185117298b155c8e146aed79c7c3df50c7dcae783eb857c
MD5 f89cd892b67e43fbee89f804fb012215
SHA1 96dfd1d60f5a6159e2e1b4b96da913c04426d1b8
SHA512 a2fb51cf62c0cfb82abf0e0719d62edff47146dad49afa5ca2ac2d9d0c655ab1cec72da3c14bc6fa530be6a215abf2e8750b239f87529cad552dfaf8029d44a9
SSDEEP 768:1F853SwgHoF+wOtNCQ15fgGM1TnXMqOaTykJECI:Y53Jqfgt1TnxOsyQE
TLSH
T1381359F299D39932E8AE8747A33D6D025EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72fa5468-0a36-4c3d-ba37-426e92033497.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\72fa5468-0a36-4c3d-ba37-426e92033497.tmp
Size 392B
SHA256 32a9ec86d346d3d33f5150ca53965b0e705c46fa321cb8155fb2f940d9e52b92
MD5 9202d6182846b7a857ba3278524e0cc9
SHA1 f88f1f4534b9104e6c5d861b50a97bc41b56e952
SHA512 4c8a01408477c3c03dba46f135c2523ffbf95f7f2bd97b60bcb8a4d9f0c6b9c81cf391975002da3cccd09485ca7d97b1c879cf0f4665ed71e42c1c6e1920110e
TLSH
T1D5E0C543C72451EED43C837081834F247EB7A4B023A3074A1B20096C3C263213E26ED0
MD5 SHA1 SHA512 TLSH

Submit Download

7440cedf-695c-4b36-97f1-74048ace12ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7440cedf-695c-4b36-97f1-74048ace12ec.tmp
Size 392B
SHA256 686ee2f622b018dd98103a6c2bdfd9a74d304a8e537d0ed2949e674a4f60b060
MD5 44fbc05ea89b065600f93aced083443e
SHA1 75b291f4b53861e14fbfcc4fd065a6019caf9bf8
SHA512 4d8c69084fa7355ec842da8a8ce852264b934b2c33334b395f0df95e07bb2c4a05c967af248473d8cda562f56f17412bdcb362b8bb08fb211abd9c3da91ee7b6
TLSH
T1AEE01706D72952ABC478C37145CB0FA86BA995225262030A8669096CBD763662F27E91
MD5 SHA1 SHA512 TLSH

Submit Download

7475639f-15ad-49d3-aaf2-ba49131fd13b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7475639f-15ad-49d3-aaf2-ba49131fd13b.tmp
Size 392B
SHA256 0c40c0365e72ff547bba2cc76ddef478030a919306abd0268dc714e82c1ee4ec
MD5 223ce2b4cff7d53aa02a4ccc22f51e13
SHA1 e395fbaa2f6ca891fd34962d5ccf25ddeed9401a
SHA512 3a1dcbe2d92d681ca945483eeb9c302fdb022189c8b10a67abcb2e8f4b3fdf73da8e142c35ec8b029576dd422babe79573c035ff07d61e45a781703f4eed6903
TLSH
T130E09503C32460AFD83C833088C70B387FB6A0A003A30B0B6E2249683D767213F22E80
MD5 SHA1 SHA512 TLSH

Submit Download

7b1d0066-40f3-4e71-8a81-b21b0520eee3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b1d0066-40f3-4e71-8a81-b21b0520eee3.tmp
Size 42KB
SHA256 94340674b5ecc9a8438dcaf728d3fb7a3c9da17dc15515b3b15c37e8460bde47
MD5 9b9b541598ae2b67ce948f70f5f4bf47
SHA1 0524a65f1a817a539b88807d4b554265e81461a8
SHA512 fb7b59edb9e3a832ff222b96f463f509b27101d0e28d07a946e896ecf24ce847e6ed904c80ccf7a533d799b1f66e2e7b16768a417a4d84a424a16daf11570a96
SSDEEP 768:1FNa33Swgv0oSowOtNCQQ5fgGM1TnXMqOaTykJECI:Ba339Pfgt1TnxOsyQE
TLSH
T1AB1359F299D39932E8AE8747A33D6D025EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82a8b352-55c5-4b16-b570-6847a80a15b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\82a8b352-55c5-4b16-b570-6847a80a15b4.tmp
Size 42KB
SHA256 1c86d719537c5bf1021423642a0ab5c934ccced47ac0cdbd6bff7977cdc62b91
MD5 3eb487de7fbbf354f5476ba3cf88770f
SHA1 2a45f600d3db521208195fe6a7d7f20a1e23a0ac
SHA512 99342e034d871f5022f1ec9b2a9e84b6ff8e8dc11e0ac617f21314bcec8db678ccebef54df265495832cf25efa97b9511d312a256e6ca44da542bbbc1e59ded1
SSDEEP 768:1FVX3Swg3oE0wOtNCQX5fgGM1TnXMqOaTykJECI:xX3eEfgt1TnxOsyQE
TLSH
T187135AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8324857d-7063-47d5-80b7-04afe68fa400.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8324857d-7063-47d5-80b7-04afe68fa400.tmp
Size 42KB
SHA256 0c7f07dd52027f86b3cec6e0fff4dc9fca56081b73708a32468058e7a1ac76fe
MD5 a7ed6046753ac154eb245adee504815a
SHA1 852933c2c5f603c9044fffcbd40729c3e9c6b2f3
SHA512 422e29058c6ad37f0f5c1924915d8e1c2a03a7eb63777db9770d932c7970da7fd982a198ae5757552c4d32098bbba97bb02e01ae67a6627183f88c611d69d8e3
SSDEEP 768:1Fnt3Swg5goVuwOtNCQa5fgGM1TnXMqOaTykJECI:Tt3mdfgt1TnxOsyQE
TLSH
T1DA135AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8aeb116b-5568-40a8-85b5-b60af6a90f3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8aeb116b-5568-40a8-85b5-b60af6a90f3a.tmp
Size 38KB
SHA256 402f0a46a45e1c33efb781d5898c2e8235bd05418ccd3dcf8dac3577811cd221
MD5 7415a45d3c2d5758a02e9b73de2da887
SHA1 23ffea235d7aab73efc093fa37dec771556f5c3c
SHA512 e3b6db8ec93bc05aa297829fe43fec7996027c49e39acff013003a3f2266c7c654600b6d4da88e4c490aa180e4803de9909b497150a7280f44b9c59c5662ffd2
SSDEEP 768:1/UxvxjgC+93sywOtNCQiu5fgGM1TnXMqO/TAaP8:YZj3+93sFcfgt1TnxO7AG8
TLSH
T1D003C036AD55AD739CF2D380B20AE297AEF144A3D1C51DA889ED3D0E068B35D430BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e2083d5-0193-4bb6-8ed9-8c9adab13602.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8e2083d5-0193-4bb6-8ed9-8c9adab13602.tmp
Size 42KB
SHA256 8f605dcf397aab3a2db27c5c2dba514c56160e53f5b6e2c6846b417c19b47b6c
MD5 c2612d0641908d304fa484e446a23f1f
SHA1 79e925cff9ce207c79f05d8aff5db2c20c4e2daa
SHA512 dba2042b2c98eea8782b1c99deb15f6cc3e4cae0bcc8cec2b0a677132787028518ed449b540144edc5a4d5bd8da8b9faa26a53cd414fb3061f1dd7fbd83165cb
SSDEEP 768:1FpaM3Swgpoh6wOtNCQc5fgGM1TnXMqOaTykJECI:NaM3jbfgt1TnxOsyQE
TLSH
T192135AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91bb3346-ac1d-4d44-b792-6abb2e3a099e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\91bb3346-ac1d-4d44-b792-6abb2e3a099e.tmp
Size 392B
SHA256 6a0e83ef2ed6abc7841ce55345fcc03893ab63e1d1f460aa4e4d649875f16b07
MD5 9c23b12ecbe3903984f18c2c6d6c687f
SHA1 e6208bd88920cbd44e31406f6e36f6f83e7c6164
SHA512 3b98834bcd9e48912e1f452dff22a2c81235a076373008af2f324d0d024eff029c45021dbb27b176b527ce83dcc2fdfd45ff79776435ae78229cb8b50fc903e1
TLSH
T139E0EC43C32590EED83C837000830F246EAB98A012A2071A1B3409AC3C363203E22AA0
MD5 SHA1 SHA512 TLSH

Submit Download

9369519d-3594-4046-a5db-0d1eede86b25.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9369519d-3594-4046-a5db-0d1eede86b25.tmp
Size 41KB
SHA256 21610f0afae15195604b3523a37c1c5a332dd92fdff2c711e2d5eff0acaf7fa7
MD5 4d10d60d99d6895a58d1280066ca6f2b
SHA1 ee69070d0c9501014d497b17988470a957b9975a
SHA512 74d6aa2e59e242931224d3d302b6c3714c6e0efce28abfbba5a80cc5af07f9ac1a6b923f95cf8e4c95c69974dca3e7edce3e8356a7a908e312d706ddc43c154b
SSDEEP 768:1Fvs3SwgQo4kwOtNCQz5fgGM1TnXMqOaTykJECI:js37cfgt1TnxOsyQE
TLSH
T1931359F299D39932E8AE8787A33D6D015EFDC167B5841994B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98ff7b7e-675a-4ac7-b34f-46f099db0be7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\98ff7b7e-675a-4ac7-b34f-46f099db0be7.tmp
Size 392B
SHA256 4b608bf57d682c696d42665d74c9543c6f98ad22172942f65ba6886e687ff762
MD5 61ddd394e992bb3e6ea429e5c9583784
SHA1 06038748507bb4acc30653c6c4da0829a96b642d
SHA512 ff0f044bb2120e9757b2c0ff1f26f3a8f27d8d6712806bcadaefdfefad2d1c46c116a180909fc53cb05ee372759f567e8cfb9bb308d9780153092783aeaac6a4
TLSH
T1A3E00903D31451EEC82C837001C31F392EA388B442B24A0A2F7049AC3D7A7203E26F80
MD5 SHA1 SHA512 TLSH

Submit Download

990fea47-818d-4ccc-abc1-0b4dd3fdb8f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\990fea47-818d-4ccc-abc1-0b4dd3fdb8f3.tmp
Size 41KB
SHA256 44f6f4b1081480430e7bbc2bc8064e5192b2a0a1891b4fe0cd1b280978fb4450
MD5 80064e728b90c753544c566374d7c7d6
SHA1 9b4465884745af8eb047d501d513c4bef35c8d84
SHA512 8363ab603e348581612f685f4a60f60680c351bc65a8e8058a9f317d4d2dd4cf75b3989e656d3f1b303875134df80e99bf1a7ba16e0129c262bf7055665e829e
SSDEEP 768:1FHs3Swgko0QwOtNCQn5fgGM1TnXMqOaTykJECI:zs3jwfgt1TnxOsyQE
TLSH
T15D135AF299D39972E8AE8787A33D6D015EFDC167B5841994B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c3afc02-0249-4cf2-836b-81b498ce92e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c3afc02-0249-4cf2-836b-81b498ce92e7.tmp
Size 392B
SHA256 01e9da729b7c880d3b32ebd663670aba8016ff73815de506f43a321eddc1a772
MD5 ee621da76cfe0895413d0e0841f2e8fa
SHA1 235ec733513e4267b38387af2798999dad622fae
SHA512 ae9e7598723f1a8d2e7384843a1021c869fd5480d7a8d74462e006161981e162ceb134404570fe3b9e2f36e29c6439c3d5064b5d28cc5f8521adfed0f03b868f
TLSH
T121E07D01832860AFC834833502C30F78AB90C47113B3035856BD297CDD557991C03FE0
MD5 SHA1 SHA512 TLSH

Submit Download

9c417373-965b-4c63-907f-a6449538a066.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c417373-965b-4c63-907f-a6449538a066.tmp
Size 392B
SHA256 c3f5f240968bb4b5a95ef66e792fa325381beef09bb3eb02bd407f3e720f7b78
MD5 770435f6a9c0586550353e99d8f16bd4
SHA1 4f48aa3f7632bb796cc078698f1bc61549a75464
SHA512 269df5eb67297dac0894f255c9a1e99c19929f843976841ab2fc4907f33eed6031325c151c800e38aae17cbbd2963faf57981a7ec65854264873167566b7a4bb
TLSH
T147E0C203C31866ABD938933016CB0F74FFE9C46157634716467C697CAEA57652D03E81
MD5 SHA1 SHA512 TLSH

Submit Download

9c54c2b9-3f2e-42a9-9752-78adaebd44ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c54c2b9-3f2e-42a9-9752-78adaebd44ca.tmp
Size 392B
SHA256 30fc139dabce2f76d9961f7ee05a22615d556f65ad081e7b65ea6fb636426786
MD5 8e67f4e07927fa2be9602e0934dd6c9a
SHA1 b619281aaac5e30d10966d8bc061f8cae1292fb3
SHA512 053348a8585dcffe6c2b184421e5c47d1b170479cb940e02a6336baf1980cc8b9d733651f96fb898fc88cd045bf0098b8169297f053509d3931edb060cb89c2b
TLSH
T1B3E00903D31451AAC828833001C31F282EA388B042B20A0A2A7049AC3C797203E26E80
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

1b1a1df6-d4a7-462d-adc7-d4b9e45fb5d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b1a1df6-d4a7-462d-adc7-d4b9e45fb5d9.tmp
Size 15KB
SHA256 ee36903728b123a8506d532158b8a581c1389b134ef8ed532eadb621c64e52f4
MD5 813ae5bef3e67287f2f9009b1cfe31c1
SHA1 35d0e811adf2d4a57c425bfff025f2cd6d02f0d9
SHA512 f89b8aa9113d0c1e28722763ecbef9ced66eb2f9f9f93a97c45b340920f6ebe424076b1d5f6d612642b6db30c88b6182fb09e6619384e19cfd63161e31c408f6
SSDEEP 192:sxRvRMHcBWC/fLstq1oA8pwU+aV7HrvP/g6+WNQYpgpS+HRmZYRY3Q3jFGaIgDOe:sxRv8mWC/fLst5LJ/5BgJYZohAmcM
TLSH
T13572B8569924DA7BCCC7D619BE757F12D6F50033A8925E4CAAFCC51C04EA6FD220381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22657678-3277-4ce4-83d2-52e67596828b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22657678-3277-4ce4-83d2-52e67596828b.tmp
Size 32KB
SHA256 ac9bafdf6eb6a6e26cfc41a90303d11137bc9f59d695a44238f8447a83d1e318
MD5 e1d0a4e70abfc351fb6fe220a49f050f
SHA1 d6064b1f7d52de21d799656ee262ad677e5b27ff
SHA512 f9b63858423f65a8c3ad8e99fea99b12a9218ffdc2d98e7f229ff285b2b01dd9a8ad3da576b503e5ae05ee14b38916de54d895cb0dc987c7fc148252dc84edb4
SSDEEP 384:sxRv8mWC/fLse66s8qMpRiYnazAW8pZS15posJWeT+UTLG/THggJYAe+/thCmcM:sb8mWC/fF4Mnc7WeT+Uu/TfDymcM
TLSH
T1D6E219429820D97BCAC35D18A97D7E32DAAC106369C6CECE5AECC91C01DE1FD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ac6b618-7d9f-41b2-9bb8-b369018f65d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ac6b618-7d9f-41b2-9bb8-b369018f65d8.tmp
Size 15KB
SHA256 4d8554cf82680ceeff38a0d865f175b873911389a4c328ee70826219f80ee29e
MD5 c74f828c40f088c762d5f3e51041c92f
SHA1 eb22650a67c2b2aacff377c8b1c097ac1cef86b6
SHA512 3a5cfbe444d51e44528b9bd096f2c6c27904e78819763da4df079270e007d4f872d23b754d3000fda81cadb79cf9474dba03b29a6b2e5d4eba14cf09e1beb5af
SSDEEP 192:sxRfRMHcBWC/fLstqQoA8pgx7H5/g6+WNXpS+HNV/YRX3Q3jFGaIgDOdAMcEG8VZ:sxRf8mWC/fLsta4/5XJX/XhkAmcM
TLSH
T14362B7569924E97BCCCBD619BA757F12D6F90033A8921E4CABFCC51C04EA6FD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c2ce674-4ddd-44a6-9c0e-cdbdca42c1b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c2ce674-4ddd-44a6-9c0e-cdbdca42c1b3.tmp
Size 33KB
SHA256 f60f25862b7ea4bf79f9a13fca1f859809f2456d3f90f396e5f211f3e201a8ae
MD5 e7fa0cc9ae3ffc247bf390f86e3b13a3
SHA1 c59caabe495cea33e3d96fe769016d1efe4044f2
SHA512 fe6cf5c34853e1ba8fe8d9f881b0117e339945790f53e0be7483d95f6da2ca78633c8205f8022288d2e163f5b95a3729f7555fbc8a60fa9f55868ef66fcb5e07
SSDEEP 384:sxRtnz8mWC/fLse66s8qMpRiYnazAW8pZS15posJWeT+UoLw/XuIaggJeAAe84hv:sZz8mWC/fF4Mnc7WeT+Ul/X93UamcM
TLSH
T187E20942D820C96BCAC35D18A97D7E36EAAC106269C6CECE5AECCD1C00DD1FD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b2c959a-c4b1-4567-8b67-10cbe6c94aa6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5b2c959a-c4b1-4567-8b67-10cbe6c94aa6.tmp
Size 32KB
SHA256 d97888d5dfe7cf9aab66209b3e851108abd75e2621401d8857e5a8efe8d83a0a
MD5 7d9d4e931b2508d00f981e324258d70f
SHA1 aa93befd09f5fa953a4720a6c08d9fafa6fac002
SHA512 38725a7ce32aa65731e9b2b25725c84e6c6d876ae8c1a3f06aac6a91dc50786f2b84ee99def14626a1dbc9797cbd5734ff8364195b8caa07bc34a1a4756f28da
SSDEEP 384:sxRj8mWC/fLse66s8qMpRiYnazAW8pZS15posJWeT+UILJj/TuIaggJYAeUz5ljN:sH8mWC/fF4Mnc7WeT+UI/TuPomcM
TLSH
T119E20942D820C97BCAC35D18A97D7E32DAAC106269C6CECE5AECC91C01DE1FD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6890e083-eb3c-43aa-b72f-26a38029385c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6890e083-eb3c-43aa-b72f-26a38029385c.tmp
Size 23KB
SHA256 b432b4c1d397ab01394b92d7e4e21e62f1dd4767973f12e7ea5bc6f03a321685
MD5 caab85028ee89e0ee5a15f46de8bbb74
SHA1 74f3ebfcbba23556bbcaadfa0e333ed82da4ac02
SHA512 6c4358a804548eb661d2dbaf0fec2094e3ce5f9309113aaefdf83219cec86b4a505a003bac0e586c1db8a99f0299aa2e0d85e73ef3c201fc05c06a7bd366199d
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRk1roqY8:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0Vn
TLSH
T145B2DB2F644CCB7E4FC10AAD9C1A6FD76D9802C797588E4047FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

709f3b6b-4ca7-4ac4-b6bd-a24ed5bcdec0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\709f3b6b-4ca7-4ac4-b6bd-a24ed5bcdec0.tmp
Size 33KB
SHA256 4e0f54d06fab23e3cb2ac4df991656889ccff007c0d1a5bb6c6149216bf7f358
MD5 d69685243b3ad922b75de6c96201dfd0
SHA1 27335d25a26c07b9dca4f039a564015791415c70
SHA512 3c8cdd95c1218795b0da470ea4ca1081fe84b7b374f2c9ca3b02c8b7a4cb15054f3453fedc89cd7068f1bb1b5f3fec16f78a283cd7b3b6732c7584269ae3f6c7
SSDEEP 384:sxR+nk8mWC/fLse66s8qMpRiYnazAW8pZS15posJWeT+UbLF/XuIaggJeAAeShJC:sUk8mWC/fF4Mnc7WeT+U1/X9hBmcM
TLSH
T1A7E20942D820D96BCAC35D18A97D7E36EAAC106269C6CECE5AECCD1C00DD1FD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

854bd8f1-827c-405c-89f0-3c9466834ce0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\854bd8f1-827c-405c-89f0-3c9466834ce0.tmp
Size 11KB
SHA256 6ce8bf5041bea85ae53866f735d95155e5f6104abf505d768a011e20eb4aa268
MD5 047c45df682ed706549477bf9f0ffa80
SHA1 36cc6ba1855eb93a83d62b8c95568eb2463def0a
SHA512 7e5056aaef26d9350ff4d6d538678fd684eafd6712eee60dfb210e905a0633bd57517de3af695ea3b538b0ce6b6bf5a93b643494d849285ad2d2898ecbc2e018
SSDEEP 192:sxRYRMbC/fLskqUzoA8p41/g6+WNIYRLFY3jFGaIgIJ:sxRYcC/fLskWM/5IFhs
TLSH
T1AF32A615AE68A93B8CCBD31DBB567F53D6F91032A1911E48EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96d72031-ee47-42bc-9641-cd8ea7f4ed28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96d72031-ee47-42bc-9641-cd8ea7f4ed28.tmp
Size 14KB
SHA256 baef7dab88a5b20e404f6eda28b9f86c6bf2446c2d29b39eb99a3eb564380083
MD5 6280f7dfa2e7e21f7d07bd826bfdcf62
SHA1 f5ce6c058060aa5794138a3983f580366a9079c6
SHA512 ecd343ce1e227fa3907b6629e30592b2722124c8798258025c6c0e9abd3a14a2484d4b734bfe85fe35f3eec8d08d110d5d94debe366467f37398501fc85753ea
SSDEEP 192:sxRfRMHcBzC/fLstq6oA8pKx735/g6+WNYNV/YR43Q3jFGaIgDOdAMcEG8VqM:sxRf8mzC/fLstge/5Q/UhkAmcM
TLSH
T11D62B8569924E97BCCCBD619BA757F12D6F90033A8925E4CAAFCC51C04EB2FD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 9debc1fe2f0ee8f7567dcc880a8913b81b6f95ac7ff37277eea8bae2f201c9cb
MD5 08cc15b7544eae3c27726b09ddfa7ede
SHA1 96e3776ec6b6cd8956a1d73e5e90c43027f251ab
SHA512 43f0007b4bfae6de9d7d2d693ba3b03017ee292de2aeb1c371f3266e48290eb4e8850cc4474334e1229927261f55a089a2f2d5415da88de7564bfa3d1f42ec91
TLSH
T138E07D8645E8C36EAF08674781EC534CC3C03A5FD2E8E90E5744C58C700B280B2F6790
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 cec367a399319fa2af904f021a1832157307faba1a3dd0c7b2ae2877c8bbc0c8
MD5 fd6cc205cfe9775fb9b7296c25723d5f
SHA1 55a4b59ce4a46e3c402771f5873a351fa719dbd6
SHA512 1947020d4358294afe40c371b6b2005a56f3faf518c5159baaca7ce7186c15d9f5c911427c06038d2a763df2338837371999455f4c2520651cac37bda56d8839
TLSH
T14BE078C504C8C37D631476874374434C8780365BD2C4EA0D3740C5DD744B5C47EC2651
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 081a0dada1e2a8350799018e69ec15586b9c4154e6db25a52a8447c9684cecf7
MD5 9d60ab8e8b0f0cd8fae5745811ce8871
SHA1 f10f57f826fda2da99fa5c73cbdf6f990e09af69
SHA512 44f3df4068483798fb3d5ba67c0bec9951db7e5463d27cdc73648558758ed47bff8928411bfeefc148ca2b38d35ff68b9537a7d83ad128896e4f156975603001
TLSH
T145E0788905C4C21D534C698703F4731D83957E5AD3C4AD0E17C0C5AC704974176D16E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 1bf601b785a35766a84282be3a7a9e050b2384d49477d5feaf87379f4f85fc2c
MD5 a2fbfc3d65edcdeac5458bb0093ed7b6
SHA1 8bd0374b3ed96a0bd1688860a66f7795456b0a6f
SHA512 f2c495e6a0c9ad36dcde3b45e06b46d0add25793aafe17fe83de87c86d228fc497f3c2887742da2df04bead157328cfe3ac2733a05def717292f78a78fb98f39
TLSH
T101E0268504C8D22FB30866874268430CC3C0369B92CCEA8F2749C98D714EA40AA83690
MD5 SHA1 SHA512 TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 68KB
SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
MD5 0e776a9829f2513dc6b150e6e74178aa
SHA1 60fcee40a3ce00c80e125cad5c0a55fa02d15f2e
SHA512 39f0ccd6a44b69d59611679d725ad12187393d9628d977f9848796d5855fb145f3bfe2a3998bd2bbf8b5240c33cd6ecd9d49ed09f4d0270d5ae40558cf7acb54
SSDEEP 1536:H51miTVgrQ7JaUf76Z+AGYguWv0KxwhGPkMxOIdzz/SIWT27zQMPvp+elQDQ:ZYMR78X9GjuW8KxwhGPkKB5JWTMzz5+e
TLSH
T1026302329668F371BDE5B98DFECAD32F58485C204207CA11167E3DF3852549954D8C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 45KB
SHA256 44037f335df78b9480cccb8c3256cfc66f4104ba47af461ad6737484508fbb7d
MD5 204702bbfa462bb611f1a8da644f646a
SHA1 96d9672b81c40dbd758281b91e328c3d616c475f
SHA512 16b6d14ee1edff1be193f46f9c37a3e2f285030e157184f77df471de515f72bce1d035b81d751c578b37da804dbf821896279712fd179a8c99a20879267283f6
SSDEEP 768:3kYXoLZRlp6HFkHcM3hHUK8bO8NspukTTAYnRoIjsdbniSHd4nwW8e1QHR8ktvSg:UFLHUS3hHuOys1TxnuIjsVnVd8AHnvO+
TLSH
T12D23F171C30413D2F13A1978E22EAC03F4F2484A7759CDA11A71544BC38AFB6AE99D6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 40KB
SHA256 25f1d7fee2bd9cf97933b907f627a6ff47534b2ad58fb99676f17b472fb1cbba
MD5 56e6be029d77f578e709c24b614846c9
SHA1 489c375c9f3497c386174d83cad05129e537ba2f
SHA512 efe69b930590d01364af98e68539d8bda4538ca7becb19b8b38f6ad6838c3f42778bd5625afb6f76c12aa360b6d3a13d42419bc0a198cd4c043852130a90e8bd
SSDEEP 768:Oik2SzcOA8H4wXFyV5PIHYmRfDHj7ehwvygSjgBpywIcEOPV54UT8B+hOIe1nv1:jCcfqXIAdR6hwvyOBQQDh8Qkf1v1
TLSH
T13D03011D9DCB6B8815E6B12AEC9F6E50FBF94C6C8E3C28496F20C8126985F40883D59D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 54KB
SHA256 010fc7c9bec1c6c14ce5fa00f929b9365b1abc61d25265b54d075511ac38bbc8
MD5 400bdbb0341ebe09e522ec0fc7852939
SHA1 63d5975c586a824f3450611460362d4cd2b03420
SHA512 b0902943c97e3beb9caa1732db6f299aa4913123d3d165a4f104a75a4a0f7bae2d75b96bd24278325ecff5ec4c96356477550295dfd0123cd826099a42aaa99b
SSDEEP 768:yCBVGfIMQy6XneFmRXUt/nhjxMgklMheRPE4lm2r803APHMKtsETksbhulfy:rcgnyOnPi/9xM+edE4lthKtXTk4cfy
TLSH
T1FE4312395DF8F5CCB21543B193168F0B89753434A73BC536E0EB20F8A27C155AB1AAB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 27KB
SHA256 544c11dc585731e0fb13a885e55fe671f69b9d1adb7d7f9ab3b63d5cd1886b48
MD5 158a0cc3b8390b268676b3fc3644dbe3
SHA1 bf06cf6e7d96d7808b0c245be28d79c6b963a5e0
SHA512 d41616ba3fd2bafd80926c890621b0bb2b0e50e7625badc6e25d86b26eefa7526451b9f0d3777c54c4cf383cb87e5e2361294b79edf19e9f514d72c4cc0d100b
SSDEEP 384:nEbIVNOH9SSEO9ixuS1MIXHV1rSclc82x0ySkIMNCOkuDvDoVd68tbAaBrVhiiwd:EbIVNW8xD1xHVZSs2qMNC5ugV6aZiit
TLSH
T152C24AC093F4E90BFC399AB881559713A6ED2210E519477AFECD88DCC5A4CF48D47E62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 257KB
SHA256 dcc528bf1ad8f1fe8dbb08ed945c3fce698689a2c1a8e5a9594cf4770e3ee4fd
MD5 85cb5418ce158cfaf328f091a2565f5b
SHA1 04421cdb8c57bbcb19ed5e6dc39e295ab596f6bd
SHA512 74a91864b39c3bbb88060d0ef28d3624d8026b520589506b2d2429aebea40609b5a470fb39b173908286e89254101e7a552b9c6fd36af2c5c0d2a535e789c81b
SSDEEP 6144:bpDRmrEV7jccJesBpB27JYUySx8JIFQgpq7DVpYk6u23Sx:b287jJes/4ySAtgQDbotCx
TLSH
T1294423AC518AB241FD1AFCE6CD7733E9192E8429C3E575271B6E48EB0CD566F042806F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 47cad69f2001c25ab78babc9c7d6566f5613eebaa3c6655fc583b319d8d0d947
MD5 fc933aaa359776070db99b1b454ab5dc
SHA1 31538bf3df9ee2aea9fcc16c4477d27c95d0244a
SHA512 c0055d8077e9e3956e6d5f51312290fba75fbf8dfae276d7326b40fb12312003fb20d787f1dbb734a2e00740192e4720948af7d46c4513ecab85fbeef36e0c6c
TLSH
T14261618067943592D7ED52F4D3DB108F3A3869B729973F1007D8EB78A99532DC05E388
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 8KB
SHA256 df3dbfbe393e0f9066fe19be86247deca9c3d361c3692fed7e47129c229a05a8
MD5 4ff2c649d86ab844566291292509430e
SHA1 1699263bf60e839620c0ad8f7eff269971c13cd9
SHA512 74595f2cdfef87e1d8407ff3837f068dcc1385496c7229ab64b60cef04a32ae174b1b2c26ebbef94846d08bdcd19d6e3675a85ddc5d13be23eb562ad85d2ccf5
SSDEEP 96:nMmQTrCRcb2vMstXiZQsqol5PTY3B2nZRYqPMaEl0SN54EscVc6BMt1cqTU1UZFd:ngfC1xvwW39b6Sbw6BMzykhEXjE
TLSH
T1551207E0B3947091DB8F32F896EA348AF63824B3044F3F2502C8F778654233D91B9668
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 8KB
SHA256 3fb97bef92e5eef49e127aa17c9e53bd502636eb9fbabea78e1f2567c04b2809
MD5 72cc9ee956c0d9804f8880e1c7e0a382
SHA1 b8430066aa39134eb0941a1c3f33af30c53fecc1
SHA512 707c2c6911bbe5822c897a7a2c4eed94c3c677dada4735e3283328ef76e5b88e7d8c168fedce66c4b88bf155c625cc4407469b955e7efdf87718bbb8cbce684c
SSDEEP 96:kAmQ3rnRcbGMstViZQsqol4TTY3B2nZRY0PMaEl0SN5hEscnc6BMt15VU1UZFbT1:ksbnLxxwl39R6Sb96BMmkhEXjE
TLSH
T1740209E0B3957081DB9F72F896EB308AF63428B7044F3F250688F778654273D91B9668
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 73454a2467807c666b9197f0caadfd6ab828acfb0a5859db4dba99227ab0f76b
MD5 c175723e9f7ac5824816c9a88bc43b08
SHA1 2ddf8e5d82934510416e0f58fd4de9e62fb33083
SHA512 48a2756236d197082465420cb75129edb92ab783370c7dae5ffc38505e1add319b8d33350b8110aea868ee5d276a2cd1aba8dbfe50c0e82de861ff99df70355d
SSDEEP 96:saPSu2FSTwv02ozZcqFqntKfxK0cl6S2zTYlCTCJToU7P/S:seYeRS8zQRnlCQoiP/S
TLSH
T1E1A172A0D7A470D1CB9C32F592DB618AFA3928B358533F3102D8FB74758235D81BA278
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0708eec8846478833277f6e7aa8921c228113c42453c2f35343746f28c4ab862
MD5 61a55b4063cf3cf897de85562e5b92b0
SHA1 4cafc082460e354eed7056055dcad2202274c25d
SHA512 d2338b33bfcbc20bfceb5b2ff0f5ea3ae5bc208dd0b91220321e21199c55dc2a547c777d100335bc059af3f1d10430cb67efa5c639364b68a7213d05dfc8fd50
TLSH
T1DC61618067943591D7ED52F4D7DB118F3A3869B728973F1007D8EB78A98532DC05E388
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 f425ed82bdb1a635b53d4f6feb1c98a34c35936139e121a7b54a38803cfc5cf4
MD5 3803061bae45933b23197fcbe9974347
SHA1 4c08f109e0f33ae657a8e04d29526d8dec9758eb
SHA512 01df1dc79d7e7300b03471202d83e57d7d30326b50ea9bd83b10b04582fec2a2489a5134283476e92561d57284fd8029481094435cb9866307adda6d063ea9d0
SSDEEP 96:cAmQ3rZRcbGKsxFiZQsqxl4TTY3B2nZRY0PMaElHN5Oscnc6BMtO5U1UHFbTEXj1:csbZLPB3l39RBbJ6BMX6hEXj1
TLSH
T1DF02E5E0B3957091DB9F32F896DB308AF63429B3045F3F250688F774654273D91B9668
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91aabd87-977b-461b-a1a6-7882bafb5ef1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\91aabd87-977b-461b-a1a6-7882bafb5ef1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\000003.log
Size 20KB
SHA256 452a6601d2c86013a21c31a013da14d7b40efc2c33b90c309edb963f3284c3c0
MD5 77de125c0bb93fb31034dfa7ea64c8da
SHA1 150915a1257d9acf1e1aee3c8e0b174293d7a39b
SHA512 5ce1b9d430640e527615edd27e06bab43ede9b470da6847ab70179ee72ed53abb8b1b8e5970db802bb10055b66eb9f44a42c21db8b55ce171683324790b5a8fc
SSDEEP 384:0R7GiHxha5xYMRiHxRQAZsBcmKn8MwYMRiHxRQAZIyxYMRiHxRQAZmtzDpV:0Ja2sQIDC
TLSH
T1E392321973F66416EBE38A7B24B32D988DB3BD61B908CCCD58606C7D07BE7801516763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\LOG
Size 341B
SHA256 9a1f2475f0a622200d86a4f9af41ee387b0cf3ec290c1b36ce8b5f395a05897b
MD5 d9522f0a1e956e98abcc9222d9046cfc
SHA1 e6d7b8c4aea5314eefb87c6bdf0445cc2ea59f5a
SHA512 cdddfcb971f8170e50dce585029f5c00dd0b0fe5958bb3b7cbf3cedbd831e9ebf7ec8b1d14588cd43d8da75d47379df2b48cade9676b047b273d3806f188e64e
TLSH
T1CCE0682C80CAC11B520411A341247B0DC7A7660FD7C8AD8D0F81C928B48A188A07E281
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

05a67dff-df2b-48ef-bab7-5a45c4e95e62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\05a67dff-df2b-48ef-bab7-5a45c4e95e62.tmp
Size 211B
SHA256 bc9502b0ed405e3967b858888bfe15ba08c616644659a7ed46d2ec49e78f7a90
MD5 78611ff505be36767506ffb07f8f20ae
SHA1 868cd0517bcd77a982c02d568eb83c1b4128e33d
SHA512 ec9fd261cc4b29c8e37362020d203c807c7effc85b2491fe1b56e702bb51980d7f7d4ba30ba1e97424ac5496d3067cbcc7492b666071e48ea5f7851b9013097b
TLSH
T194D023D31605B0B4559C6D927079AD4FC33700552845DDD514D0585C4EB245C0747144
MD5 SHA1 SHA512 TLSH

Submit Download

181b311b-140d-4bf0-a6e6-2101ab13720f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\181b311b-140d-4bf0-a6e6-2101ab13720f.tmp
Size 11KB
SHA256 7ad4c24c1c869141e2b29dc9dd36a2fe1d1fbdc2df041923666cfedabfb99fc7
MD5 a7bd1188800a955572601f334b1dcc47
SHA1 cb37630f77004c4a427b54db7744a6347774c7b6
SHA512 32abb6a24c906bdfc24915893036b838a7dba5d11bedba81bb9f7d7bfd4cd5620e23d70ae5a35e2d62852a8baeae6943470f4cfa56621e338d149862ba1bf1a5
SSDEEP 192:DkUeKf2aIwVCjexl4mAr/EVZaaiZAJLFO2c9wls8G1fxBKr+JHYpivmO+6RmBmvE:DkUeKf2aIwVCjexl4mAr/EVZaaiZAJLr
TLSH
T1C132BFF7C3F4922DD91155F0AA247E1FCE2D0929532C3C2A89E5AE0BA3E2471D28175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

338bcf19-4752-45b9-8ae6-5839ddfe4e22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\338bcf19-4752-45b9-8ae6-5839ddfe4e22.tmp
Size 211B
SHA256 dd0f158555eb30d69e083bb642c70630f55240cabd25e2cb732dd4a52834cccf
MD5 fa9291dd7d4a6ef26c15b499fd24b600
SHA1 34ae3120a5dc32aee75622382412fc4adce0376d
SHA512 41965c899b323519d7ff4c8ccb2d1b181eba4eb3fe1f831b2bbda44140ad58da80cc2544136dbb5d2bd81a8a17dde3a9e984991d4f3f874c9ff9e6d54d5198bb
TLSH
T1F9D022A32300F1B5A6AC2E82707AAC8FC32750A2284ADDD610D0989C8EB246D5687244
MD5 SHA1 SHA512 TLSH

Submit Download

6527e782-0613-4e18-8116-287bef0f027e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6527e782-0613-4e18-8116-287bef0f027e.tmp
Size 13KB
SHA256 d2d54d1814a68fccfea70df0eaeea9a36285d47d162f555a515fed7d84ba221f
MD5 ce71bce9501fcf2b3055fb092a8f611b
SHA1 66f5deca2714a620cec7a0922261d93f90f4362c
SHA512 6c8ae37bac513592a75fb2e01270f2567cf161230392abaaedbc2259d3a02e82a8e7cc86961d92a0c1f7cad34cfcd867f76c5927aa7483dddddd8f5786ca04ee
SSDEEP 384:DkUeKH+i4YvgdecO1mmr/436XRH3VZaaiZAJLFO2c9wJssrnxBKrRTHgzivmrN6l:ot47Qii3JF7n7
TLSH
T17252CEF787F4862DD91195F0AA287E1FCE2D1524432C3DAAC5E5AE0BA3E2471E141B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

760d716e-fd41-42e2-a97c-6d2b32a36ea3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\760d716e-fd41-42e2-a97c-6d2b32a36ea3.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

94fb5227-456a-4c01-ac97-c42d9703edbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\94fb5227-456a-4c01-ac97-c42d9703edbe.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c2518219-095d-48fa-8f75-2b693eb1e4e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c2518219-095d-48fa-8f75-2b693eb1e4e6.tmp
Size 11KB
SHA256 46440382dd51a2ef4cff32a311d9087e5b9ebc3976af41828560455d09adc45d
MD5 371a8b42ca4e47c6773098688d21380d
SHA1 4dcf615548b8397c4a3bd4b8b1b69013b00a4ec6
SHA512 447979a73608e8a77d999066f251d6e5c1b717bce8d62f4118073f986d99d3e133f55790a5f2566d2a37c505471065cddf779f166021aff3959a230e4f69edfa
SSDEEP 192:DAD39f2aIwVCjexl4mAr/EVZaaBZAJdFO2c9wJAs8G1fxBKr+JHYpLvmO+6RmBmY:DAD39f2aIwVCjexl4mAr/EVZaaBZAJd7
TLSH
T1DC42CFF7C3E4922DD81156F1AA247E1FCE2D0929532C3C2AC9E5AE4BA3E2471D24175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d74672d7-944d-4ffd-85b2-9d70abadfd50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d74672d7-944d-4ffd-85b2-9d70abadfd50.tmp
Size 4KB
SHA256 a68f9bd6a9b459d325ca441129247a9accd5d537277339559df7eaac495e7d30
MD5 97cedf8da16cf1c3e67b273f58917d55
SHA1 075356d1f8d7b625b89af3afb9aa2a80940d0cfb
SHA512 8bcdef9d2ef9125d0b4358d7e79e28267dc32e492ff8a4d9b27a09fbaaff9f4734a19e030aa0180cb881233392dbe1fb7ff87dc9f734b0c0b21e6f4677884e39
SSDEEP 96:DAD3aKVZaaBZz8JdTgiEePGwBup2urBuIu/ux:DAD3FVZaaBZAJdTgiPPGkO2c9wI
TLSH
T15F91BDF783E8866DD91156F0EA186E1FCE1D0516432C3C66C5E49E1BA3F24B1E241A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0a50f71-39ce-45f8-bdb6-ec8104d97d15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e0a50f71-39ce-45f8-bdb6-ec8104d97d15.tmp
Size 10KB
SHA256 1b28c058998bb3e9c0581a23cf9172cc20443e635ae9641c34f91a1b48a0ae4f
MD5 25dd145b7d7449abe77075f4a3a3c1f6
SHA1 d1e06c18e763c8d3e0c492c9b837ad217ae52c80
SHA512 e54416bd379ac830c7e34c186fe679d3008c29bb1855f59d1d35e5b9ce6ffc53995c5e1776d8d808238e67c02707ff5463508d89277d9a71b5e2d56c12de44a1
SSDEEP 192:DAD39f2aIwVCjexl4m8VZaaBZAJdFO2c9wJAs8G1fxBKra6+J0NYpLvmCGmBmvmh:DAD39f2aIwVCjexl4m8VZaaBZAJdFO2h
TLSH
T1B622CDF7C3E4926DD81156F1AA247E1FCE2D0929532C3C2AC5E5AE4BA3E2471D28174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8cfc6e3-6364-4435-8744-7e4b49f4b409.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f8cfc6e3-6364-4435-8744-7e4b49f4b409.tmp
Size 13KB
SHA256 8bd1d71e1376a7f9170c6cccadf882a1ee03a8051a7192d10a868783528c8a2c
MD5 0bbac7a3269ca23e219da8b3386c47c3
SHA1 9eaddc1d3334ba6f0435fd748091bc6e2f57efa2
SHA512 1bc8839bf7aabcd00989b01a563faaca0ea17c6bdc39c7a9bcd5b43dcdd3105d2ec191f8a396502c9c90ef2d1fdce497e1245083a1c6392885eb5d700c267eda
SSDEEP 384:DkUeKH+i4YvgdecO1mmK36XRHjaVVZaaiZAJLFO2c9wJssrnxBKrRTHgzivmrN6Q:oe47Qii3Jg7nJ
TLSH
T17252CDF787F4862DD91195F0AA287E2FCE2D1524432C3D6AC5E5AE0BA3E2471E141B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa621909-1df2-41b2-bbba-10acd2ef896c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fa621909-1df2-41b2-bbba-10acd2ef896c.tmp
Size 13KB
SHA256 d4337e73c6984af80dab76a62bbf2ee9ddf5cf118935d60d3593052ddecc8381
MD5 697cf03830ccbb85d57ed1e470c88244
SHA1 616f59e5f45ef814a853d3e65111ddddf16db11a
SHA512 db8d58028639f7e7062e16c4a0872f326259179fc104e62d4175c12867c185bd915dca72090c805f582aad309fd0d7ec2694b4de5ac307f7e5f04d969c849aaf
SSDEEP 384:DkUKH+i4YvgdecO1mm36XRHjaNL2VZaaiZAJLFO2c9wJssrnxBKrRTHgzivmrN61:P847Qii3Jg7nI
TLSH
T16152CEF787F4862DD91195F0AA287E2FCE2D1524432C3D6AC5E5AE0BA3E2471E141B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\660bd5c5-f016-4a69-a6eb-2905138bb6a2\index-dir\temp-index
Size 576B
SHA256 674bfdd8b0dfac0405366cabd44fccfe6bd0ee79e86a15326b19ebbface1c9ca
MD5 6769fda8232201655a1a31acbb5ebd67
SHA1 760615128c6e78a9b2f9edbdfa061a9f086775d5
SHA512 43de4a789abe4358a40e2e1304ac4550165b2474e868f0e0d0cc549db971cec1b9ce089d3b46f6494a215aba1f59e1eb16d412a9f860b3e76ab28b675be7551d
TLSH
T10BF02BDC1E230F0AEC160130647AB458613825CC9340A90FA0EC823E8C973C8ED42A88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\660bd5c5-f016-4a69-a6eb-2905138bb6a2\index-dir\the-real-index
Size 576B
SHA256 b3afd59eef9ebf084fe8d7cb7b7a4aa112cdd4ecf36c79ce1d3614f82fea65a5
MD5 f609bf4980a6baf84804a3b113100bd8
SHA1 af7c466a26e25ef904d57e2dbd470952d67c10a9
SHA512 2591fce1265bf8f27b77766127049fbdb9e72224cd4819f1b9abf934be26203c9770f9bd4cb4a9370b16ca32ce2f08065e03f378d705ce86b8fe3d5791188254
TLSH
T169F0F1EC13234B42FC0401B5A43EA2A461761004930CEA8FE3E2586ACC51BC8DE42B6E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c30a18b7e13d4e4079678df73e70f0e02801ca0d74a27a924d69353feb171240
MD5 737f074ca56a113d00824d8966721067
SHA1 092ceed89a1a0f80c712f5512f2b4b5a98b4beba
SHA512 b71ebb40a1c40cf517219945dfc1db0041f68c6327df3281462a8c5fc96e7b3d2197e04a61be86c6170bd10233aafd1cbc09ad108d0bcb6ee1ab4b08c971b5a3
TLSH
T109E0C0B72EEB08A0EE9F97C7143254A9001578C8DD00ED0F803F92DB94B1358744BC60
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 161B
SHA256 3a0842e157e4502a4c07638493fe8fd2576359c618c8d65db3f15e924ba6fae8
MD5 4ac1c168f9f15cb79b561d4f722cd33c
SHA1 bdf87469c63e656fa0c61315988390482e845b09
SHA512 b58e331dcdd2d5f72ccf11340b9f4d33e39a8776156f16c86b279366d4bd29f326c1597dfb6228865a1962a6fc5f88765e8d485a7f66703e8f00a1dc4c3b51e5
TLSH
T148C08CB74125461A2621ACF264B5350CC1036D0D8CC1E9F4CC04F09666B87229201E90
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
Size 77B
SHA256 3308d538fae1f9406e0feab67942d5b2b401324cb8f477997f0d510094d48587
MD5 48a610835ecf62867930e60bb6a1bc27
SHA1 bd727e9a36f1a220fc2e2d038bc58ef35818cfa6
SHA512 e51e49a8950cbb550603fe71979adecd6b55b95c2ad12c5cabab95dae55ef89c8436cd97afffc71b727c2cd4527e603e57fb403f0d084d1bc01eaa1db7754964
TLSH
T126A002FB080490AE4F30B8E8247AB61DE04B828C8CC1DEF0CC28C042A638B334502891
MD5 SHA1 SHA512 TLSH

Submit Download

d1ce4980-b6cc-4b6a-a58b-bd5d4585217c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1ce4980-b6cc-4b6a-a58b-bd5d4585217c.tmp
Size 11KB
SHA256 1efd3d7c6ac44be392d42dea987ce01d4b69001b06d69cb72844dc597e12aae3
MD5 d6f38801785a1520ecc3335d169e459d
SHA1 7ed7ac2c71ab0f5affb011be6a7cdb1e8e4b9f97
SHA512 916a27fb6987329bb8d844da973392edd4274380f4daefc715e50bb9b5d308f1fe85d97c6cb8ce6a15dc01ac4bf8624dbfe8999b542b5955faf98f36810ac8b4
SSDEEP 192:sxRfRMbC/fLseqUzoA8p41/g6+WNIYRLFY3jFGaIgDsJ:sxRfcC/fLseWM/5IFhs
TLSH
T1FF32A615AE68A97B8CCBD31DBB567F53D6F91032A0911E48EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d24c0d4b-a15c-4fae-8c7a-edc92386500d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d24c0d4b-a15c-4fae-8c7a-edc92386500d.tmp
Size 33KB
SHA256 0974400b16900ea1aa37d660bb3a98aa155bd012f9e1b35ae47b1515ffecf3e0
MD5 a9c08ad3fbd3ed731260b55494ca44bf
SHA1 b2a5fd0bad56028a185a381de43d21ddd85b7f14
SHA512 6d096cd3026bf2e5336714efface9ea2dcf9c888543183db2e898c85667620d823c72a9a73d1df633eaaccc4755e8620da4c93973a38707720b186a0c777c05a
SSDEEP 384:sxRtnT8mWC/fLse66s8qMpRiYnazAW8pZS15posJWeT+UtLv/XuIaggJeAAedhhC:sZT8mWC/fF4Mnc7WeT+UV/X9EpmcM
TLSH
T18EE20942D820D96BCAC35D18B97D7E36EAAC106269C6CECE5AECC91C00DD1FD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f65f5352-507a-4289-bff4-2bc1e1c3e636.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f65f5352-507a-4289-bff4-2bc1e1c3e636.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7790d901-7c1b-4b19-9e8a-3e8c74f92383.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7790d901-7c1b-4b19-9e8a-3e8c74f92383.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 50c04237bcf2afd3768787d0873c8c42e70107f83969ef58f1d55beab801e6ee
MD5 fb7cfa4b3281097339875943fd70b3f5
SHA1 7c5ef99471d51a700ac6eaf4e920fb35c8ae6395
SHA512 93fcdcacd916ea4e6727a4bf025957a6479f453a8e09179fee7ad7952ca7781460154db911d9c555796733937950d511b4eb49306b170ea718400fca63de1773
TLSH
T1B1E00202D2104167C428433000C71B283A71841003A30605056005AC3C243202924940
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 81fd18a38bc54f3c6a361ae02bf68c32f4866ff66cf984a7568d282574eccdfd
MD5 2969f133634aa1b9588f50a64c28d8c4
SHA1 f5abbf778c6d237e0916743f4a3708997f8cdf37
SHA512 0f562afd0ef453436715dcd4d014e7120c2aedda1825159bb31ea4f41b54ddb0e4f6665ac4896be79008730e64aa2edd101687c7918591319da902894951f7ea
TLSH
T138E0C206C32961AED838933006CB0F78AFE9C47113B3071A85B86A7CBE557A92D13F91
MD5 SHA1 SHA512 TLSH

Submit Download

a01091af-cab2-4189-94ca-f1b889d646e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a01091af-cab2-4189-94ca-f1b889d646e2.tmp
Size 392B
SHA256 767664455f777a068e52f8ee70553f273a5a1ce9c4a0267b1fb0447188d98b59
MD5 ca607c1f023c0abc95ae20cc6ae92d98
SHA1 0f75ca5cb18fe65b1eb52f81c8a66e7412b5ff2c
SHA512 bed593476147f15b04d2e8c374fcfb9b04c345c90a89e3e1e4c6873f4cc08285c4ec23ac022cb73e08f14b67b3a16613db291e5aea0918ca819061eb922b9abf
TLSH
T18DE0EA43C32451AED43C837041834F247EB794A013A3074A1B20096C3C363213F22ED0
MD5 SHA1 SHA512 TLSH

Submit Download

a5a7c6f3-41e3-4fd4-921a-e0898bff1802.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a5a7c6f3-41e3-4fd4-921a-e0898bff1802.tmp
Size 392B
SHA256 5490e81ad59feb05de3f53d78965453033c8e2b4f05c0f68f83ff90f78d5c9a3
MD5 83ab0024d28df35c65976fdba43ded01
SHA1 775e114ec95e03d801284f9c4d619385f637eb8f
SHA512 4fa50d163baec4e6047cfea1170e609d02e1f72fb217e83cec7a6e79e584aa9357730f56fd3e18b9a89be4d685b66b82659c0bcc713c1cda54188be6ddce22e0
TLSH
T1D1E01702C32842ABD43C833185C30F383FB6E021422203068B624E6C7E767102F22D90
MD5 SHA1 SHA512 TLSH

Submit Download

abd75022-95cd-49ad-83ce-db02974e3034.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abd75022-95cd-49ad-83ce-db02974e3034.tmp
Size 392B
SHA256 08f99bb0e364795acbdc4cc0d9fc508f7b0759b4ea1942d0cf22aed92c6c7e22
MD5 3671940c7ed5ff602a59569618c2771b
SHA1 85b25e37cf6206227549b7fdee13ad3d2f87adb3
SHA512 a4c68fc6bb0c4040faca9bae5f918c3f30f9d3a6dba408160245053b1c25253acc6d0e818b8be7f8029d1f28246a2dea5467c9ec02ddfc4f8d5cfd8196bffae2
TLSH
T1D4E09503C32460AED83C833044C30B387EB6A4A003A30B0B2E2049683D623213F22E80
MD5 SHA1 SHA512 TLSH

Submit Download

ad0af7b9-a3e4-42b9-802a-be8471d03dbc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad0af7b9-a3e4-42b9-802a-be8471d03dbc.tmp
Size 392B
SHA256 fbedc50d26b7ce504f6b0c93fb5d2ff280c59709a0245abd19dbc5ef62c9df98
MD5 fb7972302f05af19b2db422572ba1eed
SHA1 5a91713b6058d2e84fced6f6a148b5350d8ca997
SHA512 a9eba64499f780d51b8f25bad4affd7de43c9a5f2d76493caeeb0860d81c651bbdfebab8420c3df82ff39f535f977b2e78a74c89db3c4ac7af5e926b7c14fcfb
TLSH
T132E01702D33841ABD43C833141C70F787FB590114212030A47760E5CBD767252F22D90
MD5 SHA1 SHA512 TLSH

Submit Download

af6fe22e-b51c-4b65-8034-677c10d002ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af6fe22e-b51c-4b65-8034-677c10d002ed.tmp
Size 34KB
SHA256 d5f38139f22f4817ad85fe1fff7280188e6a15be1aa104a9a59574b3bffcfb6c
MD5 5829c327b4bfbf770f5a0f486940d243
SHA1 90864679454dbad1b2df471dc29c39aa662d4756
SHA512 43a3e5753081b86113c4b8e478a517e42325b475d0b4b3de51f9bdb82824735341a367daded9faeb317e87347f5a3e109b6fcdbffd348cfb8b472f5088df5fa1
SSDEEP 768:Px318wOtNCQiu5fgGM1TnXMqOaTykJECI:Px3zFcfgt1TnxOsyQE
TLSH
T1FFF2BE72BD65AD73ACE29385F206B6122EF18167E6C91E98D8ED7D0D018725E031FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0609bfe-6552-4d7e-88ef-70cb49bff6e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b0609bfe-6552-4d7e-88ef-70cb49bff6e1.tmp
Size 392B
SHA256 70e670a5fa9e061ad514f41b0715ae9b96b90f6e7d5ae0cc9d13cf2a0ee6fc4c
MD5 b472fa8d1931132b695e0db92d84cb8b
SHA1 79c1c751589f6d494a6bf52be826dcf72295785f
SHA512 bad04785d3edc6abc94fe824b15fc2313c8115725ea3cf78fd98ae52402602d28e9518b075b6aef29986b90147b6a4eec8182ff4914ca815f09f422980e46bdf
TLSH
T14AE02652872451ABCC78D33546C30B349791C4A063B307984A68A87CFE4976A2C07AA0
MD5 SHA1 SHA512 TLSH

Submit Download

b3c836af-fb29-4e92-beaa-5007e6b1a4ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3c836af-fb29-4e92-beaa-5007e6b1a4ae.tmp
Size 392B
SHA256 bdab1b7101aee1a6ac252674d17e33fb7a4f54d0d136ed50b7a4ffa37d17da9d
MD5 d0e8468caa8cee72ffba8aa46649152d
SHA1 69dc41082dbefe65e7a0277412e03eb62fe9678b
SHA512 91d4aca6d5ce4b2eada8b3e8e53bfd3d21c11670ae001e69385d59ba231398525b727dc63a4323c92e7d48969a58b03f43e45f834f568b6a942c7d3910617081
TLSH
T1D2E0CD11872961AFC878933906D30F74ABD4C4B113B3035956BD697CED557592C07EA1
MD5 SHA1 SHA512 TLSH

Submit Download

b483c069-625a-400a-8d1c-997db82536f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b483c069-625a-400a-8d1c-997db82536f7.tmp
Size 37KB
SHA256 c987f33bf39b7681176b7707a907060ad73d1c9044f2f8dea4ac42c0cfe40813
MD5 778b33ce8d628b5a98fc10687ddf987f
SHA1 162c6bac90fa0172407194f4683743ff125f7343
SHA512 83eeacacf8f65acb4e2a5263be46e3b54c689d9f2bbbe9673bb65896b622f55ded34d9fb657e98184b560c62b94ac43a2883954e9f94917127701c5ff157281e
SSDEEP 768:5/UxvxjgC+93TBwOtwu5fgGM1TnXMqOehAaP8:sZj3+93Ecfgt1TnxOeAG8
TLSH
T11C03CF36AC5568739CF2D384730AA297AEF144A3C5C51EA889EC3D0E059B35D530BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b49d3475-0d2c-42ca-9b06-f814aabb0d30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b49d3475-0d2c-42ca-9b06-f814aabb0d30.tmp
Size 392B
SHA256 a7b4d31cbf38a2bed14d918368b4e2cd670bc78b41a88d324b4cde11efa4ed56
MD5 3d838730ef254705d90bd73011289a22
SHA1 004772cd890b0ec58dacd18aa16dfb17c05b1971
SHA512 810b1663ccbee7faa0eb32b6a98d1caf0a1115e75a537b86ec0918c828b18e687655c9f29c4c926b02df6bab93f4c8309cc0c18dd82062326d3588bdbfc7a0df
TLSH
T1FCE00143D31155EEC839877001835F256EA795A446B64B561B7449AC3D763603E26A90
MD5 SHA1 SHA512 TLSH

Submit Download

ba232c9f-40d1-4c1c-85b7-168ba95a703a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ba232c9f-40d1-4c1c-85b7-168ba95a703a.tmp
Size 41KB
SHA256 ff7b12a14e29e6ae8136a983d8ab086d791b86a97680520886165516bbfc1c01
MD5 9a7d24426d7974da1d0041eb6a9a3f48
SHA1 dd5b716ee3b254c6fbb2c96dfd899bca6ef38e97
SHA512 d5d9eb3d281165246e505902d17a703b44084c697e7b17e5dd127c7f862ede673d6ebde7f70088757dc3aed219355c3003f9dd3e9089fababf477d2a262cc8bf
SSDEEP 768:1F5s31wguo0QwOtNCQI5fgGM1TnXMqOaTykJECI:Vs3AHfgt1TnxOsyQE
TLSH
T162136AF299D39932E8AE8783A33D6D015EFDC167B5851994B7DD280DCC462BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c00bab21-0a9d-48a6-82c5-0bbd60daf80e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c00bab21-0a9d-48a6-82c5-0bbd60daf80e.tmp
Size 41KB
SHA256 6be6180e20f4c8700d3f28f6bc1d70b7c9d15042823c3a09e3c53242e7416b92
MD5 613cdfd74cb2bc01ec88468f79236ece
SHA1 465982e58109bb4a9b2a0bffa0444ad1ead510c0
SHA512 b7ad530a920eb66b09f1f6ca8945286f5463d2a5f0ceadfb05ce913c1b299971db8554f24e8dff087129a4ec45d9ce31ead5b9e33510749e2c36f6c4fcc6dd8b
SSDEEP 768:1FIn31wgdo0QwOtNCQ+5fgGM1TnXMqOaTykJECI:Mn3tRfgt1TnxOsyQE
TLSH
T14E136AF299D39932E8AE8783A73D6D015EFDC167B5851994B7DD280DCC462BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c25fe30f-1b8e-46de-b7d8-5ed8d21dd6b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c25fe30f-1b8e-46de-b7d8-5ed8d21dd6b3.tmp
Size 41KB
SHA256 97578ff2f692c19733320bc154e0faa41a57603acbd51a5519c1d4dbaf7bc682
MD5 c213472a1d1e389866d051b0eefc4035
SHA1 3fbdd2195360c52ddca54b15032d73c7cd333876
SHA512 47b603a029bf6b6ccd8d9a22b728f17106c3e31ed2b51ba2e8e0a17026c9dbf4c04075047ad00732589a33003ae82a6f5a149947bf5371952cd47dad5060b63f
SSDEEP 768:1F3k3Swgbod6wOtNCQ85fgGM1TnXMqOaTykJECI:7k3RTfgt1TnxOsyQE
TLSH
T14E135AF299D39932E8AE8747A33D6D015EFDC167B5841994B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c885a1b5-103a-435a-906e-5d2f8993253b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c885a1b5-103a-435a-906e-5d2f8993253b.tmp
Size 392B
SHA256 e79f7dfeb079267f062990ad241d08b66ce8d90a037453fde3198fbb3ca361b8
MD5 4eba2793ee0b63eaaaecf461a083e06e
SHA1 ff195d34fbd023d9e04f8cb17fd0514222139e42
SHA512 545d044a3f2601f32629428264e0247453d37c7798f5bd2a4248e6494686ecf2617eee74608bd1f6e67bba5153088ed72e44e2c297682a4d3c724da4b35b5ac9
TLSH
T14FE0C202831866AAD538933016CB0F74BFA9C47257634717467C693CAE657612E07E82
MD5 SHA1 SHA512 TLSH

Submit Download

cd1c27bb-7e7a-4d06-b87c-dbc19d8c79fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd1c27bb-7e7a-4d06-b87c-dbc19d8c79fd.tmp
Size 392B
SHA256 167a9e3b96bfc8157eccdd286e85b52ab42da1fdf39413bc8a25f04a47623740
MD5 5f2f5b96c6472af0e9c454a1cfbac054
SHA1 12134253deb887a4aba1137e6f64ca2e1b207264
SHA512 4867b39ab8e0c22d12d879f9dd1a09acb5fb922b8d6e5b3473e6d97058029a93f371a987325b5675b6f2e1d708e593fbee50774988277e65ada46b2695e571c1
TLSH
T13FE00143C31150EEC83C833000830F302EA784B002B2074A1B3409AC3C363203E22AD0
MD5 SHA1 SHA512 TLSH

Submit Download

cd8f31a8-464b-42a5-a1a5-e3c9ab624751.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd8f31a8-464b-42a5-a1a5-e3c9ab624751.tmp
Size 392B
SHA256 8897beac68a89b9ba52bd014e6dbb1ad7444c6a5c0a98830e49dcf7af31f5f19
MD5 17bda3b4c22dc3b0a8a62fae54f50616
SHA1 ba1b7d984eb3502f7086628e150baef14cb099b1
SHA512 9747de0e648b331aaa3f6bac7db4d9db650e2c0c739472c4d00ac6f369cbb71422fe8fdb88629ed4a2c3b5d4d1028bee0c392277553f2b2489fbdc9232356a0b
TLSH
T1F2E09207C365926FD83C833084C74F787FB6A02246A3031A5B26096C7D7A3213F22F90
MD5 SHA1 SHA512 TLSH

Submit Download

ce892260-bb49-4ba0-9f2c-06002b294560.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce892260-bb49-4ba0-9f2c-06002b294560.tmp
Size 42KB
SHA256 28447eeab8011cfb1126ed6ca7a9fc81b137eea11637d33a0f7da0c3d172c4f2
MD5 6892db5864e497973c2025179acfd0a8
SHA1 917ce67b9c367567057fbfdf0fa6bc8f07c93af0
SHA512 25322e2c029e862425f311585208ab98b5d9682d31b421a6b8382997ec186ce7fc2d1cfd65d5569a89730230ebf87cba25a753691694a4cf7a1dcc623a9a604c
SSDEEP 768:1FRb3SwgfoNUwOtNCQH5fgGM1TnXMqOaTykJECI:lb3vEfgt1TnxOsyQE
TLSH
T104135AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d62bb3b6-96d9-4771-9563-ca41f94de5e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d62bb3b6-96d9-4771-9563-ca41f94de5e0.tmp
Size 392B
SHA256 dc561447962c85f9224b2973b6134404d1fcb96dfe5f41fbfa41d08061873c8c
MD5 ed38b326597b64191251f771f52386eb
SHA1 d63b040710550da3b517dea688b815f0bb7a14ef
SHA512 aa76b4b09cd1886a9cce8b769683c49732aed374dda05028f779e8092128aab1b3d6da00b46da102927141102d8dc713a9b3d61e10d381448d600350ff33b06e
TLSH
T14AE07202832861AFC838833001C30F78DFE8C07113B3030946BC6A3CAD15B992C03FA0
MD5 SHA1 SHA512 TLSH

Submit Download

d7c9d364-5069-450e-9626-a6b5866dc6bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d7c9d364-5069-450e-9626-a6b5866dc6bd.tmp
Size 392B
SHA256 244cb7317ea7a86895cc4b66e4c8b117cbf4d880fdc0b1f5abf84447ef85eace
MD5 d3a9b0a554cd892f28cd265f34a5dc25
SHA1 51c1eecdee8ef99c1559e27409154e1538e79772
SHA512 82d80d453ada7cc4d7e071e4bcb71be2f03fd5c4f3ca5fe751a0baec40c79bbc9412ba3c54cac188efb2645815693b77984b0500bdd94850dffa2e90d1319daf
TLSH
T1A2E00403931591AEC83D837001831F356EA399B442B64A0A2B704AAC3D3A7203E26EA0
MD5 SHA1 SHA512 TLSH

Submit Download

d7ea7172-cc6c-4c37-b47d-662db3ed40ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d7ea7172-cc6c-4c37-b47d-662db3ed40ff.tmp
Size 392B
SHA256 7b5a7d302d7874b0858276381d6e9c56953b1ae0e2284adfba9d57de1d6c1a92
MD5 02ead587e370ae05c8cd5f52b83cfc89
SHA1 9cd4511de15c9745a8a3ad3b714dbbdd3dc5b446
SHA512 9ad3c93300757bbc95014f7f431018a8000771f4ea64b727cc6691d05ba7ef84fd7e4b322d541ab6757a6681a546ae31ea087db20b67d7e1660d70621d572673
TLSH
T18FE0EA43832451AED43C437000830F246EA794A012A3074A1B20096C3C363213E12E90
MD5 SHA1 SHA512 TLSH

Submit Download

d90fd87a-f26f-4b7a-b1e3-128d04ea5791.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d90fd87a-f26f-4b7a-b1e3-128d04ea5791.tmp
Size 42KB
SHA256 f0686a913439920c98fb2de1464a3e86df976daabaffafd50f0f1a94a43279e0
MD5 28618714066a74ddd4551ff71ee9f0f2
SHA1 160f2ff7c517a90a251e2a27ebeeb99184f9e79a
SHA512 bb7322555000e4669920de7c7ae6f5e0b2b44c8e04442b7803a4af4a4bb02a0565753a403aae407aa51566c82dd0ef408ee590cd4aeb27a135431e34e01cadda
SSDEEP 768:1FGL3Swgwo+QwOtNCQ45fgGM1TnXMqOaTykJECI:yL39bfgt1TnxOsyQE
TLSH
T15E135AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1c91ac5-b902-4bcb-9826-88eb319cbec5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1c91ac5-b902-4bcb-9826-88eb319cbec5.tmp
Size 392B
SHA256 685b977f7d0ba51f64fb974ac284cae32e879fff6aceb61f6cc0850fdb30ea0e
MD5 82169cccbcdf8cd5d3c16650ae0c8ee3
SHA1 f16b0883ccbfe55db0a5e2a36090398b04e14524
SHA512 153aea81c38c187e70863d09c78d71404ea04e2316923e7857052a2a8df6aef38ed57703a3ae17f0f92986587c528e29c48c9aef9467ec3278a4f569145f2e95
TLSH
T1F6E0C202C31862AAD438933016DB0F64AFE9C461176203174278593CAD267513E17E91
MD5 SHA1 SHA512 TLSH

Submit Download

e1e38c7e-3e02-4f4d-9796-839a2fb2d75d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1e38c7e-3e02-4f4d-9796-839a2fb2d75d.tmp
Size 42KB
SHA256 74eb2ec3833946aa61932958cee702667a11d09138b8e61e92992a03bb3da6f3
MD5 38b17e43d27449019054973652855867
SHA1 4be1e22660c877f262bbbbafc71c3328d5544025
SHA512 5ba402dab7eb75f4879a19009c0e9ca582a85008fd0549ffb40396afda7badb91fa55eb031670fa3d4db2445027a7e0c9c668ca8884d11017a326768c3144c83
SSDEEP 768:1FYM3SwgCoMkwOtNCQM5fgGM1TnXMqOaTykJECI:MM35Xfgt1TnxOsyQE
TLSH
T172135AF299D39932E8AE8747A33D6D015EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2f178fd-de06-4341-bd15-469f5fe955f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2f178fd-de06-4341-bd15-469f5fe955f4.tmp
Size 392B
SHA256 0adb41b4127607241a7edb618c1aea383b77489bf42da504330a2e445e6d9880
MD5 091a55e60ff424c5d4f6bfd14d486646
SHA1 30e3a42ecf3d518334efff24fcfd5ec996526699
SHA512 f15f8068a060ae8a55bb745fca5d6f991dbb7920093162a8cea64ed8c2f6ee4e1e08ff2a02f3002e406d53f9c5ede80d23ed2b06de2c93eef5ded7e62285d9ca
TLSH
T1E1E09E16C325517BD83C873445C74F786F76A021425603165B264D6C7D363603F21E90
MD5 SHA1 SHA512 TLSH

Submit Download

e5eefcb8-d807-4ff2-83c4-d6782a5397f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e5eefcb8-d807-4ff2-83c4-d6782a5397f6.tmp
Size 392B
SHA256 92900eb1f6d2dfb14ffdf7e31913fba6b7451cb4cd9a0b10bb4d09f89ab3a8ee
MD5 6661967069b512719842da23e4580d5c
SHA1 1bbdfaab1752a98085a310ad8efba44328d77ff2
SHA512 30fc7f1f8d766905f2c055581912124ff91431c1741ff1c5db2e1a47953def19d963af376dd174d997cdb566e3dd50c2691a1a439e2de712a6acfe1389537d8a
TLSH
T1E8E00103931451EAC83C833001C31B282AA388B006B20B0A2E6009AC3C697203E25F80
MD5 SHA1 SHA512 TLSH

Submit Download

ea0228e7-c823-43a8-90a2-f92560eccdc3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ea0228e7-c823-43a8-90a2-f92560eccdc3.tmp
Size 33KB
SHA256 92274fa6d09a8fbe5025892e8ca852e1d50b0a011576c53cf3174b5407c676ee
MD5 52e383ad509db3d44558a2989b875b74
SHA1 10b00777447b8ecb31b749ea0f5daa166686caea
SHA512 49336301ab2a5f696967213101f0b0233cc8a8d3d738f9f45aa4e5605884a28438ea6c4ef9aa1e0c6c83106738bc23fa4eec79889937972222555df787a0fa69
SSDEEP 768:Gx3HwwOtNCQif5fgGM1TnXMqOaTykJECI:Gx31FRfgt1TnxOsyQE
TLSH
T1E3F2BE72BD65AD736CE29385F606B6122EF19177E6C51E98D8ED3D0D018725E031BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb4b5998-ef85-477d-964b-c9fb7c9f77c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eb4b5998-ef85-477d-964b-c9fb7c9f77c6.tmp
Size 392B
SHA256 98258ea5c9febebfaeafca33d2e5ab2766f1a83a0f13d3ca43d83094d75e6bb6
MD5 82cac230d6e6d12927ae877bffea00a7
SHA1 c5da090cd600e7db4f7a7ce24bc0503e84685e02
SHA512 22c58c41876803d4a47fb4ad9b79d4527411e76ab1a31eaed815e3fcc11bc0858a9a1f9aed576f39f9850c3181ba724fbab39670677a08496d15c2e27079bf27
TLSH
T163E01702C328416BC438C33141C70FA87FB590120212030A97750A5CBDB77662F22D90
MD5 SHA1 SHA512 TLSH

Submit Download

ee6a5722-3318-4987-8eaa-f7331c0a8fcd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee6a5722-3318-4987-8eaa-f7331c0a8fcd.tmp
Size 42KB
SHA256 cb11e1a42eef8fe6d99fc71bdf82563941e9695e0c6a7c328f3dcc903b41bf45
MD5 b9ec9960c31d69d45b7e9ba7646712b2
SHA1 99ebb5e82f77c99dfde8aaaf98e6e1fb8a5530d0
SHA512 0cc6abc194e13b2ace4f951401c8240f8bc2827e6e1a8e958ed90347290c993f659afd17822461c09f4c9c32a49c18718d5c25bbe29783d27d152e4a30a590f5
SSDEEP 768:1Fme3SwgzoHWwOtNCQm5fgGM1TnXMqOaTykJECI:6e3Xhfgt1TnxOsyQE
TLSH
T1EE1359F299D39932E8AE8747A33D6D025EFDC167B5851998B7DD280DCC461BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef5be61b-e490-43ce-95b2-f3b4beed921d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef5be61b-e490-43ce-95b2-f3b4beed921d.tmp
Size 392B
SHA256 59e4b6f61d01b727cf0245fc5a5e5024b685c713afa0275ac425f1bb3fc9d4b0
MD5 8cf60e51da1976756002eb9962fd6814
SHA1 ab25692fe5aed83f8e48ab9871bb8597948e78d9
SHA512 2a1ad28d0c071ef9002d71e6f0139113a62d9ac477a67a6e844e732eb41932642362bc5c3b3c4ad6a1e1d15b50ff3bfad066b66de456b73c3349f1fa268e2f92
TLSH
T112E0C202C31852ABD438833052CB0F68AFEAC462066203074238096CED367613F27E91
MD5 SHA1 SHA512 TLSH

Submit Download

5e58c427-a154-4537-bfa9-d695fe902cc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5e58c427-a154-4537-bfa9-d695fe902cc5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f3412101-456f-4762-8342-4e5410cf0a39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f3412101-456f-4762-8342-4e5410cf0a39.tmp
Size 392B
SHA256 737dd9b8bc5a3f618e5224b5ecdc380300807392d115584efeb3ca24972ffcbc
MD5 f2a90f02e96f6771c03b2bc4b4147543
SHA1 6c819d184dbce2b0bf7fe2afc3d3ef0e9ed3c0ca
SHA512 b6b93c088baa887958bd0e433d29e8bbe4872ccca13213ac34271ab472bf1beee24c34b1154a91c96a39b920e583cd1b000d82aa85f26b08d66e468bd8391952
TLSH
T111E07202832860AFC838833502C30F74AFE4C47112B303595ABE693CAD18B9A2C03FA0
MD5 SHA1 SHA512 TLSH

Submit Download

f7db53a3-e92d-4850-9792-2db4450501ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7db53a3-e92d-4850-9792-2db4450501ec.tmp
Size 392B
SHA256 696d5a788bf357f650cb416a5d6d401f3c03e719aac36bcbd54f195e503c1c6a
MD5 b4c8ef3cad764918d02eddcb4d1cdbe9
SHA1 b63aede7173c768143d76729fd57f01f4208187d
SHA512 18c8382ecb62f2f81a363d0e05730296fe3a81d2749b910f954f4a1ed2d752bfba28852cd9b04e87a8dd907917ffc55fd9df6a1c0404cf0892dab25eb96cc76a
TLSH
T148E0CD01872851AFD878933906D30F74A7D0C0B123B3039956BD657CFD597596C07EA1
MD5 SHA1 SHA512 TLSH

Submit Download

f9f814ea-0b1d-4392-9457-c2adc8c4633e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f9f814ea-0b1d-4392-9457-c2adc8c4633e.tmp
Size 392B
SHA256 cda26fe88496c6f017b3ef4cb16f59b717140ee7523fb93e01d6758adc5e863f
MD5 1f4ed8166d692aa47c04123fb6ed966a
SHA1 f53f0117690bd52a0c64fc7918c06e42a1efb1a6
SHA512 8c2ec9b74312b92223eaa4b77b1240979627ee052b8f16f3fe1ca7faa558ef5cc8fb8217eeeed3662689b6bd66406e9b3514654af38c888b95bc3e2b7e58e0d0
TLSH
T11CE026528B2451ABCC6CD33606C30B349782D4A063B307980968A83CEE4A76A2C07AA0
MD5 SHA1 SHA512 TLSH

Submit Download

149bcae8-e141-4dba-befc-0afce747983d.tmp

Path C:\Users\Admin\Downloads\149bcae8-e141-4dba-befc-0afce747983d.tmp
Size 14KB
SHA256 18c7914de3f648b2126b7b328b2410b041ad056e2730eb6dc4d03fd46fa80a8c
MD5 027f6892f062b46f2eedc849e9691e59
SHA1 ab6f53c91cc1b9ffc3e68bb0072e37dfea0b4b98
SHA512 1a1e7bb1d647432d5f042c35821657f71748fc3178f6a70a538ef563736806d481e7e513dbe8421436f6b5664aa73f863dba63f3e2bf83b35470b673d5808817
SSDEEP 384:rQB2xuyLqYHKLKv6v1QGJIaQ0ZHwTx6xLmi:rQMxjLqBLKv7GJXQ0ZHwlkLl
TLSH
T16C625B47CAE788B7C101E4742E3DCD15E7336B74282D24A8AB7E5ECACD563685C8851F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45f699c2-0a9b-41fa-96cf-318979f619c8.tmp

Path C:\Users\Admin\Downloads\45f699c2-0a9b-41fa-96cf-318979f619c8.tmp
Size 5KB
SHA256 d234a669ed077f84d5228bf1333b08ac29860892e2d232be31db06347e94731c
MD5 08537fc52c0e4669d2003a1bbd2932a8
SHA1 1297c1fdc67d9253427c644c5fcc929683dae4bf
SHA512 730a3062e54cfab7b87a7a9a5700e1993006a160043ff02140476751b786945cf5143d67ecb6d75259d64883b8845944c63bcd311aad42b50b0d2f308ca0d664
SSDEEP 96:kn1vIvJxVdXSaTeWS88gFp9JJrG/XaNdScIEiwm:sIvxdXSQeWSg9JJS/lcIEiwm
TLSH
T10CB12A4BA912B557C87CA4B121279298E7FB8431139799D38FB77A609AE42733D03219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MEMZ-Destructive.exe

Path C:\Users\Admin\Downloads\MEMZ-Destructive.exe
Size 14KB
SHA256 a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d
MD5 19dbec50735b5f2a72d4199c4e184960
SHA1 6fed7732f7cb6f59743795b2ab154a3676f4c822
SHA512 aa8a6bbb1ec516d5d5acf8be6863a4c6c5d754cee12b3d374c3a6acb393376806edc422f0ffb661c210e5b9485da88521e4a0956a4b7b08a5467cfaacd90591d
SSDEEP 192:sIvxdXSQeWSg9JJS/lcIEiwqZKBkDFR43xWTM3LHn8f26gyr6yfFCj3r:sMVSaSEglcIqq3agmLc+6gyWqFCj
TLSH
T180624BCFBE204417D8F0C57530659234DFBACABA1B968EDF9CF91E529AC4C072823265
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

note.txt

Path C:\note.txt
Size 218B
SHA256 8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270
MD5 afa6955439b8d516721231029fb9ca1b
SHA1 087a043cc123c0c0df2ffadcf8e71e3ac86bbae9
SHA512 5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf
TLSH
T1C3D0A719040784251C7052D17145A5A09B70562D77F626EB74DC690C212700F0B37C9A
MD5 SHA1 SHA512 TLSH

Submit Download