hxxps://www[.]google[.]com/search?q=l&rlz=1C1GCEV_enUS1093US1093&oq=l&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQRRg7MhMIAhAuGIMBGMcBGLEDGNEDGIAEMhMIAxAuGIMBGMcBGLEDGNEDGIAEMg0IBBAuGIMBGLEDGIAEMgcIBRAAGIAEMg0IBhAuGIMBGLEDGIAEMhAIBxAAGIMBGLEDGIAEGIoFMhMICBAuGIMBGMcBGLEDGNEDGIAEMhMICRAuGIMBGMcBGLEDGNEDGIAE0gEHODcwajBqN6gCALACAA&sourceid=chrome&ie=UTF-8

Analysis

max time kernel
1800s
max time network
1779s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
30/04/2024, 16:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.google.com/search?q=l&rlz=1C1GCEV_enUS1093US1093&oq=l&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQRRg7MhMIAhAuGIMBGMcBGLEDGNEDGIAEMhMIAxAuGIMBGMcBGLEDGNEDGIAEMg0IBBAuGIMBGLEDGIAEMgcIBRAAGIAEMg0IBhAuGIMBGLEDGIAEMhAIBxAAGIMBGLEDGIAEGIoFMhMICBAuGIMBGMcBGLEDGNEDGIAEMhMICRAuGIMBGMcBGLEDGNEDGIAE0gEHODcwajBqN6gCALACAA&sourceid=chrome&ie=UTF-8

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3938118698-2964058152-2337880935-1000\{C5812B3F-61C7-4658-8F5F-84B40DCB092D}	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Desktop Goose v0.31.zip:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
3300	msedge.exe
3300	msedge.exe
2776	msedge.exe
2776	msedge.exe
4136	identity_helper.exe
4136	identity_helper.exe
4936	msedge.exe
4936	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
5380	msedge.exe
5380	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1104	GooseDesktop.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4988	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4988	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3300 wrote to memory of 1768	3300	msedge.exe	80
PID 3300 wrote to memory of 1768	3300	msedge.exe	80
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 424	3300	msedge.exe	81
PID 3300 wrote to memory of 1568	3300	msedge.exe	82
PID 3300 wrote to memory of 1568	3300	msedge.exe	82
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83
PID 3300 wrote to memory of 4380	3300	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.google.com/search?q=l&rlz=1C1GCEV_enUS1093US1093&oq=l&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQRRg7MhMIAhAuGIMBGMcBGLEDGNEDGIAEMhMIAxAuGIMBGMcBGLEDGNEDGIAEMg0IBBAuGIMBGLEDGIAEMgcIBRAAGIAEMg0IBhAuGIMBGLEDGIAEMhAIBxAAGIMBGLEDGIAEGIoFMhMICBAuGIMBGMcBGLEDGNEDGIAEMhMICRAuGIMBGMcBGLEDGNEDGIAE0gEHODcwajBqN6gCALACAA&sourceid=chrome&ie=UTF-8
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcca433cb8,0x7ffcca433cc8,0x7ffcca433cd8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4720 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5624 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6888 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3028 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6372 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7180 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7316 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8012 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8164 /prefetch:1
  2⤵
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8324 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8316 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7952 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7848 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7572 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8168 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8200 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2992 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7196 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8132 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8580 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4064 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6392 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8644 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1336 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7524 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9120 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7564 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9300 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9408 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9496 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2916 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9968 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8500 /prefetch:1
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7628 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9220 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8304 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9584 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3852 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8284 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=8208 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9060 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9184 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8624 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9760 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7516 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8700 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8940 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8520 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8068 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6804 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8724 /prefetch:1
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7812 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1716,15421668790992485208,6744042903626577715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4664

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004C0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4988

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:784

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:6108

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3860

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:132

C:\Users\Admin\Downloads\Desktop Goose v0.31\Desktop Goose v0.31\DesktopGoose v0.31\GooseDesktop.exe
"C:\Users\Admin\Downloads\Desktop Goose v0.31\Desktop Goose v0.31\DesktopGoose v0.31\GooseDesktop.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1104

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
046d49efac191159051a8b2dea884f79

SHA1
d0cf8dc3bc6a23bf2395940cefcaad1565234a3a

SHA256
00dfb1705076450a45319666801a3a7032fc672675343434cb3d68baccb8e1f7

SHA512
46961e0f0e4d7f82b4417e4aac4434e86f2130e92b492b53a194255bd3bba0855069524cd645f910754d4d2dbf3f1dc467bcc997f01dc6b1d8d6028e2d957236

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
34d22039bc7833a3a27231b8eb834f70

SHA1
79c4290a2894b0e973d3c4b297fad74ef45607bb

SHA256
402defe561006133623c2a4791b2baf90b92d5708151c2bcac6d02d2771cd3d6

SHA512
c69ee22d8c52a61e59969aa757d58ab4f32492854fc7116975efc7c6174f5d998cc236bbf15bce330d81e39a026b18e29683b6d69c93d21fea6d14e21460a0a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e1acef3-d985-4193-acbd-cc1685e117bc.tmp

Filesize
16KB

MD5
daf806c84931e3ebe7cde67a10861fcb

SHA1
11a9faae9876f02f2ef2826de2a5334ddc0de498

SHA256
c4eadde4ec9dc50d12f481e913e4bfde54ea1b4dcbb93d9a21d3625827427c04

SHA512
2b19b777b31cff026a3d95e35806905cea2bf948aa0e82bbefa19b912552a5d165c98dd6a9fb98221ab3c365653c172bfebfbe506ab63d89431df6ddc24a6053

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
19KB

MD5
76a3f1e9a452564e0f8dce6c0ee111e8

SHA1
11c3d925cbc1a52d53584fd8606f8f713aa59114

SHA256
381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c

SHA512
a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
67KB

MD5
d2d55f8057f8b03c94a81f3839b348b9

SHA1
37c399584539734ff679e3c66309498c8b2dd4d9

SHA256
6e273f3491917d37f4dbb6c3f4d3f862cada25c20a36b245ea7c6bd860fb400c

SHA512
7bcdbb9e8d005a532ec12485a9c4b777ddec4aee66333757cdae3f84811099a574e719d45eb4487072d0162fa4654349dd73705a8d1913834535b1a3e2247dc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
36KB

MD5
7b1c6423660d4957add5e2b8424740e3

SHA1
beac75981fa213681ff316bb628e17374ad04e68

SHA256
27e361512a7b24e6b156a2c5f3559384f1c65a68a595cab16fcb083d495eaee0

SHA512
6cd39a98b6e16e8e74f31e01aa6e10b6b4b7969789f091239bf1b076050df49f32f8ede27c838a9fc95c196b3f66ef958fa7a32035d71d9f9f07c8eddfe583e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
63KB

MD5
710d7637cc7e21b62fd3efe6aba1fd27

SHA1
8645d6b137064c7b38e10c736724e17787db6cf3

SHA256
c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

SHA512
19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
88KB

MD5
b38fbbd0b5c8e8b4452b33d6f85df7dc

SHA1
386ba241790252df01a6a028b3238de2f995a559

SHA256
b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

SHA512
546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
1.1MB

MD5
798e76073abe579251a34ee1dacf9b3e

SHA1
7e9294eec6545c8e1bbdb7849a73820cdca2fbd2

SHA256
8657f6d3867c20699a230df7939c02ca5fe065db2efcfecf5d8d864ca4873666

SHA512
cf5d69395e47fd4da4de0019a77162736c38f88ef0dd803d114388fbfb139a66083f51bbedd8ab205ab5d41f8464a685f4e0f6b5d3a13f7b91cbb211de14c7fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
32KB

MD5
bbc7e5859c0d0757b3b1b15e1b11929d

SHA1
59df2c56b3c79ac1de9b400ddf3c5a693fa76c2d

SHA256
851c67fbabfda5b3151a6f73f283f7f0634cd1163719135a8de25c0518234fc2

SHA512
f1fecb77f4cdfe7165cc1f2da042048fd94033ca4e648e50ebc4171c806c3c174666bb321c6dda53f2f175dc310ad2459e8f01778acaee6e7c7606497c0a1dea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
74KB

MD5
bc9faa8bb6aae687766b2db2e055a494

SHA1
34b2395d1b6908afcd60f92cdd8e7153939191e4

SHA256
4a725d21a3c98f0b9c5763b0a0796818d341579817af762448e1be522bc574ed

SHA512
621386935230595c3a00b9c53ea25daa78c2823d32085e22363dc438150f1cb6b3d50be5c58665886fac2286ae63bf1f62c8803cb38a0cac201c82ee2db975c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

Filesize
16KB

MD5
7833c1f0531a31d15c336f1cde00ab4d

SHA1
7c2c37561a2f31cbecffcbc52dc72831c137daf1

SHA256
bb3f89823dc4ece6214528d728893b7a0e18231ea498c9aeeae44641eeccc86b

SHA512
3a68f53bc867c41b778cbe6015d3e79956bd0fda357b2a826a0a70cccc7eaf18563a75617a9f3720069743fd0b35faa9327f0834c35e304334823cc4129c0b27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

Filesize
19KB

MD5
1d05cc62583a7db7139e30dc7a7c24f8

SHA1
001c2cb08fc747cde1028a45b75e462ab333ea08

SHA256
35d0d6598bbfd4722ba330d6d957829de05c18706b4ea9443402298720beb854

SHA512
f4ebf61f3a49256e0a1c50e88d940d75891b54a6766d68346550d0fc04d65c63bc6224db35bc150a108d6dec981cc9b292aa90d7c339ff523e7d3a7f90b3d986

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

Filesize
16KB

MD5
bd17d16b6e95e4eb8911300c70d546f7

SHA1
847036a00e4e390b67f5c22bf7b531179be344d7

SHA256
9f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352

SHA512
f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

Filesize
17KB

MD5
19c73397068ded824edd2c5b13d0a9da

SHA1
7f0f149b66309aaba41974d524ca69390a34e4f2

SHA256
8c93e33fb098c30a82d774c6a9db9aa92ea0e34586e907ed7d9d2935582c6100

SHA512
8795cd26570fe65181d49676dd9cc9a8012bc22c3e505ac8ed8c1bea68ac7db7f77d6bade360a403a8d79cc4126ac18c2c10e3b83a163e3b42f2e3f60c32426e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

Filesize
20KB

MD5
65ea735154b4fad52043cc9b82689369

SHA1
0942adb6b44cd43a96ad5c2640b096d00bca8242

SHA256
edc11286a751b3fa3f9192bc3c468bccb5037d66dd7201286f2e020546d5a474

SHA512
4b3655b485dca25da709a19223e006db69644c6cea3fd64b52add0afcd00d15f697d1f157b0e399f683d5ec462bccd50a7f522704384af5ee1dea821f665736b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

Filesize
20KB

MD5
c73c63189cb363edd82fddb4534d94ff

SHA1
b0eb4a64cab1cd9f2c9ffe2f5c19eb0f4e347a78

SHA256
9ed1b84dd54d85445872fe1fc87159f33a8ad1af9975243b0ff44b5f5d34eaff

SHA512
9ffce073128edeff803ff95f91175e4b1a0567085383c1fd7106590f36c47541a697bbf0799b6603663545ee2fc92c0fc9c4f4278147a270d99c0c8a8dfe0143

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

Filesize
29KB

MD5
2121047af03338a1f8af1d2046b8b349

SHA1
89abb2286b68939c4fa6d1dc64dc93e23deb91df

SHA256
e3c646873320dbc463bde3c373b53ff8b54a5a52c955cabb8783340b8320616e

SHA512
67763d107a6f8919b44f6430c21e2b7b41a8b4f4e8b42aff0a860089e850bf8fb0a3287468e356f0c17551c79abc5c525f5b8454b9c930a1f97740e2c953ffa5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a

Filesize
103KB

MD5
144854e84da83ffea974a51dc947756b

SHA1
50ad7fa26be4433392808f4e3f0f79ffc273cd78

SHA256
8c008eb45d08a7cdb74767dc72e2e47dd33264487749dfcac472f8d9e1311c12

SHA512
515d5343fd3da1fe397d6722bd6b1ef8fb5a971ba8f7ba351e5c022883f3f4a9b145c70e0e7c54e5b424047adaee997095667df62464781a9f684e74d752db11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

Filesize
127KB

MD5
a106208f253538c902d7bc644abf165b

SHA1
c5c15711c02694e527344da53a6accbc49e69e31

SHA256
9edf8e7f538ae922cb33c57f15fc8c37329885d8a4fb10ca3b37f430ef10d9f9

SHA512
01fd579839b6a4bfc41d6e14224b87ff53a019f23e0b5daa87254ba90f35e4f4cbeb57d63dcc35f3b1c331292bb4a5806d529c2d75db6ddeea8aac734e12b498

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

Filesize
92KB

MD5
ed9e892dbf0080c8550b25b04bc33e8a

SHA1
08be628aef5e149a4e210693c003edd7838282f4

SHA256
f8b0c1cf9316c06c7c0c76f6ddfaa9b1b46bbb4620d029fb020301bc1ba0f207

SHA512
fbbe32b242e0692edb869f1a62831b95e0119824683df3508679d2157c6b44c8faf112086d8560f829d54849b244ebedd805faf83c15dd2f233481533483341a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d

Filesize
146KB

MD5
fedaa092805e6d577e84cc181a1a85df

SHA1
bb738ee727ec47bd69a03bc35296e4b3fe277391

SHA256
bf1dc5e2c94bf26f9b584d0c89340ddd3ff006d76ff5f1c3258764f6c50b3413

SHA512
19cc1691ce7661dd0932976f19be7c6b92d810b1caace8017dcb4389254639e912132afe9483ce4688b91cfda59e4ace45fd2b4dce6af830a1fcb9a3fa05fa1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

Filesize
140KB

MD5
471b5637e5ede341fde71563f895cf37

SHA1
73941a9629a5e6668fde8555befc863a8e1ce650

SHA256
d32222d6a97295042c6d80dae3d37fe1e0710763283d4c0438dea9ccd809c5e2

SHA512
d102f33d308ff594e971650f0a14e9c0bcd6e3bdb39b1ef7633bc28036a0ba15a6c4e2f2312781b272c86ce4d3cb00485dc3df6710b41cd5459ebba22d3a0e84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

Filesize
76KB

MD5
de60c1d6259e97e5e882095914309d31

SHA1
51cf8f90cd90c921ce3596825bb6bd4de29f20ef

SHA256
3263432006fbdcecb756905e2fabb1d2e2964c7af929b60a6d46574ff7ccd0cc

SHA512
1f6f18da88addd0938065f250d097e01694ec1a8e62627933baaa6020f94089d9e56bb63770eafdf84cb3cf21162a9dbb46868afcb0e4617c03b0559a968ae32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

Filesize
47KB

MD5
916d22a4f77e3b6b71189f0c54c11de7

SHA1
7e5c80b573cba6f2b26e152cc82bde3ed3827dce

SHA256
c94029772937362155fe16025250435ec27e0d79d7ae218de00cb7c0e2478d0a

SHA512
b5645ae7d676e416b37610060fe68030799db12e79331e5a487bb320c5aebb0184451a1e6b080a6f49e86021e2fb234ace33b2ee6b3aefa64f543dbffc3af124

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

Filesize
74KB

MD5
9827447d965fcc5515c3ec167bd3953e

SHA1
0f4202774b825f53152ee7d8d2305007492d62e8

SHA256
01a7763bd1f63c0daf49b61e1aaaa9d76ae5f99f3d27a155f06d340640495473

SHA512
5066eb6d419564a95a0044ae9f5244911c309484a6cf1ea93aad5073e42fa02e74a8733c17e78bfd1d6487db68a88d2c6c04d80feb1efd5692fe08f31009d041

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000054

Filesize
76KB

MD5
1a7dd2386d72caafc92d78c169098eb5

SHA1
a5bbb5565c509d7ebe25420eea5c9107ef176b40

SHA256
304b72ef36988c9de878982632abae09700cb5670d6ee1edc5a801c16fe7ca94

SHA512
3f04e40373c62c263bd0352e559db1a216224c6e61f9fbac36f3b3817e72695e4035e54491586cb34ce485fd24c65127c8dca2c27a56c9693469803cd0b2b192

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

Filesize
17KB

MD5
43c6baeedb28cf622c349edd94dc1650

SHA1
227c4aaafc07b02b75e14de41072116847893313

SHA256
1b2b1a9ecae31c5596cca778d9bac3858321bc19564281090d2e1f79a256fac2

SHA512
6827e214ce8891a7f9ec73f4afd487497127e9b056c45bb2f83ba096da154ccbb606799cb04a8b574dda802d3779eecb512fe8ccca25bce6cf61e4f3d7aea244

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056

Filesize
26KB

MD5
eac452e929deaec2f3242dc527852917

SHA1
166af014f2405cda1ffa3bb6ae5f32502aaf5d9b

SHA256
6bb97e69821cbba97e9024fc492de4c4ec64a3c7bde124d7a1a15faec161ff4d

SHA512
348befec796337705477f4658f1ffe286bd0e1dcb71955eec6f1507e6f217f0dbc7528b5c56458c101b1ffa0d40f82ef5ce5449682f0db3ce4f250b835c4e1d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000058

Filesize
93KB

MD5
9da731b6138fa958d83573c1513ce0d2

SHA1
1aad33ff2e87cb4cdca08a73e5477280c11c9634

SHA256
58817c8d521c4c4c4b051a1e9f612cd442fc36f5c7f820541545f271a391348d

SHA512
64c06e64c70be25bcb03179267390074f35f69288c829ee348b1a88ffb31e1d1feb8dcd312bde581e17b78f38cf5d1fb211d937a6492ce901550508d974d7a8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005b

Filesize
19KB

MD5
f266b5b7f7a5b8b30286eaf784a209d6

SHA1
6e58bd181829f56af501fbda274bc4db888e42ef

SHA256
485702c015ca106fb1fe168d023a0bb9a6d5b144480231b601b4207df86882f6

SHA512
592b950f752c1b17d8863a8ea28641782ccb93d0fac91e4f93812f0adecb0ec810b831ce45c7bc79d89ce6212ec30afb143d8ddb11464f5407981880e2723ab6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005d

Filesize
64KB

MD5
91f9bf2bcb357b71140d651b06fc4d63

SHA1
3f0393acf921f664e645293512219b067ddfb89e

SHA256
2458caf4bb1c1eed378cf2d305f0d44533d2b8644ea749598a0ba0e7c15fd5f8

SHA512
8c951c1fb792650ce4add101b324f297660c4c0a8130564e13948f0a9e9b5df1ca2918df8bb39dc647421fea7a8a43622ce9ed52c7b47ae4dcf6e2ce03a6a5e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

Filesize
16KB

MD5
9c6b5ce6b3452e98573e6409c34dd73c

SHA1
de607fadef62e36945a409a838eb8fc36d819b42

SHA256
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

SHA512
4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

Filesize
56KB

MD5
7538ae25001820cd0c822fe0b940dc8a

SHA1
40a7f6b5d7dbd61c5388cfab5c7546a696fc3c82

SHA256
b1705e4cc4a302a53252b71ea72891c06d19e9138f93ad0cdea4aea511a47452

SHA512
9d0abf539bc8ccad9a3ebd7613491d6f14dd6a27d936bf3a18f9fa406329deea374e6881cccccd8dc014e9e11c084c150180d91abb935b30f436c979f09d2e6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

Filesize
62KB

MD5
e8c0d56a14c900bd28d936c6eafbbb35

SHA1
014da87fac24abf750405bff3c4442ead6403d29

SHA256
619f8a7e8f30c5566c5d1bc600f06a14dcb33cecb26dc3d8b734323ab29b436f

SHA512
19577e8d77e27a2c8f50a0cbd62b68b80f343fe827279e5ecbb7f2a9ff66957a3e3b98c37d42d58f0d6dc472f9c656a886430f2c0b566e75d6787f09c06c4085

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000066

Filesize
31KB

MD5
23e27b25649876f27c181efdeadfc8d6

SHA1
9863dad332964fb57e21f951be539fcfeafe7250

SHA256
7b1e20c89858082755a93ed4511747464aff17b722a0a4d533e89784ab7b70fc

SHA512
683f3235691e33cbdee39172b211fa103361ec3c41a9b554834d41ad5ab079993b39bad9c5a5a743652bcea618ff3356c5287dc95817ce2a9d167c8e2a6ada75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009a

Filesize
230KB

MD5
9c48a0a5bd9686c757787bf4de4d332f

SHA1
9ac19a0d956bf1ed3335b3d9465cfdde99815f4e

SHA256
37062435ac62d6fa676dc75b1daa3721284b593e66e96854e00d1537daa0aa24

SHA512
c8f5f1082f3e5845346e3b463a2c6ac827b8c83e36f2da6b9f134980f674aea1293b5b7c9e80674bed7cf8276fbb19a82372b629d118b7b83e2b0bb29176ad7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a8

Filesize
200KB

MD5
a484f2f3418f65b8214cbcd3e4a31057

SHA1
5c002c51b67db40f88b6895a5d5caa67608a65ce

SHA256
79cbe928773386d07f0127f256f383debed5ccea5ff230465bf46ec7c87319d6

SHA512
0be1bb8db08f6e6041a85cfee90cd36a5b595afbca34d52a125465454fc806b4bb7ae569eaf4c882922fb1b962b6060534e597791cd0ad23483be5981d9be85c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011a

Filesize
90KB

MD5
62f135a8df0ab236fa42ad313f6bd85d

SHA1
223cb2d8754cf43c4b733ab75b14c04855d30514

SHA256
a69730d8fe3b5328b81c77d334744b1e41e7ad4e1eecd8395a2efef1a4aa568c

SHA512
5a3a439e2f484fa5863c570cd93e458c5e54e7e7032423bcab32702177c8d2d794be940f91e1568d5062c9ebb300cec416c8bde07247307954561b8a5924e6d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\014b383faa29490b_0

Filesize
606KB

MD5
d5bbd63a020f108fe8d4a2bfc1d5e7b2

SHA1
f0ab5a280beb5500ad805369e842b7a846952106

SHA256
37b61e4db8c400574465a31024bba02d1157904bba03392027716ce70b1857f0

SHA512
61ef397a78fe7c3e2a35c38f8d3da59da41c7eae6d45dab04b6dc1bbd9fa8a39a0a22daa41bdbf89ef052d9182a1cdc067566fd34a6851d5c0d66954706b7ce3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\03d4b5ef76312952_0

Filesize
267B

MD5
cbf9afe6cdcf7023b6d61b0678e3255a

SHA1
3c7702b55fda541d450f5dcb46eeb68f086a77c6

SHA256
33e3136210443fac85d5736ed007d9c66b8063b6cc4a726b7aa33d8cf05b8c8b

SHA512
261e4e765f5b4eb377448f47aee27647c8d23cd764c0ccd2b416600984fefdfdc638dbfba603234418ab0c1605c96e9073bc2b888b0fb404a1a60ccb518f2b79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2bd1dea4bf8fa83b_0

Filesize
248B

MD5
9b5884636305bc575c22d2464c27077d

SHA1
bbb1e6d982fe4e9bffa07f9ce3e597fba9c020b3

SHA256
72b53b35fc54716d8b33c4584d26680d4b8b27885c17abd716c108a622b1d0f5

SHA512
59ee425e98f58f5209de5d7640cc6d76ce94cb9126f214684b8ef1a8a777e9bd231f77000946e3ed92ffb73e0406e927fc141c0736633a0028c9f85d7709e30e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e90c1059a904bba_0

Filesize
32KB

MD5
ca3fed1c09a57c1d5e685c4539a7b209

SHA1
4e38ddd1458185af7873c21348fc6341f0f1fc61

SHA256
0f08be9199b5679842ea1543abd5e9577998c7b7957b330f985920549500b19c

SHA512
a421733f09bf592ffc2620bc2b443a6e555f4c7b64e3d617fa5c8923a5e72d8e95a6e6999082467dd17f0823b7d43b24cb7f3cd9673566bc89685e6ff56f1d76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5155bf55863aa9de_0

Filesize
149KB

MD5
2b44cfd7f328392acd318f584c8231ef

SHA1
655886321035376e1204145b74d3aab51c09f6fa

SHA256
c6b64500007201364ac46ebfe9bd9735b6cb81eea28b8b84866e31c3d1986b46

SHA512
e03d7f319661826b72b75f81f0a2aca50c50a55de0a50b615aaeede82e6c646e48f80508e656862bad2b27d96adbbe3224e3960922a768def36cd7f293ae9c60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\51fe60edd8e59d38_0

Filesize
543KB

MD5
99d3ab83c4495e32a55a3676c79d9214

SHA1
3b2e5a1959f2a2129ecd51de2f121c44df4786c6

SHA256
609a9068ec9af2590023b6a93bec6972fc6f04248c57b07b0aea20cbc69cd489

SHA512
cbd74ee6dcf6887b8523394add9487149df90513c9f2fbb2ec34c725d3823f2303db8fa0c05976da7f4194edeb485db62891bc4474da7214a01ebd99710be1fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f9ad1fcc8859402_0

Filesize
135KB

MD5
5f766efecab50d037b82b0a2484061f7

SHA1
d5b03718490fba85f5e648c39737504ec2f6abdb

SHA256
2421e84e7625352a3473cc66a0ede5f291af57908ba1e9dcce7e5072845f3269

SHA512
db83b85ac19ddc412cd20df29f303bf6579f6e9dcc4145486b40f25841699848ec92adf8c565acbae36c5efda4d15800510a89c236c37c977396fd10c8487b78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\65efd4b69a71d8e1_0

Filesize
55KB

MD5
d7214c4c2050592aa147d94e11fd2b28

SHA1
d1bd46f13b6960cb1bfa269f862f44d98da9e964

SHA256
7ff824285dc2d6d83f5d3258d2461a57dff4ef10f79aa6e81462c3b4d937074c

SHA512
1b13ccce646a5a57751877443e16bc91dd3f0e05dae5f16264ad9b4792d90544ce9966bf6bdc2077ac2a6360480626adfdbf94086f3dafdd171d2abf2861e945

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\678eaffd4deaa638_0

Filesize
77KB

MD5
3da6633d1f18fe0fb1cba2fa54eed868

SHA1
595d78c6dbe20c520aba1f584d03d1a869e24c7a

SHA256
23e8cb138a44f68e5e82f0c13dbd7ec3dae06861f8b41d73893992d272fcf7f3

SHA512
62b6d43ca33d207b781a3d04f9e7a100bb414fb3fa418da931e4521f304963024043449867043541711fa9bcad57b17ea7ef35000364fa862cdea2b7d0fd172d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6f0ad762f9425f6d_0

Filesize
72KB

MD5
aff5be752ebb02eb6ae89ba2abf802ae

SHA1
c5a44e954174cfdb9956e73e5e9a1c8019122552

SHA256
304ea095e856cffad59141c4b8aef75a92a9008cd4ce037b4020e7235a846da9

SHA512
47a000b455936d5e266c07b88e9129f149e136e1978098c694ea44efa38b1271130def6f048ab2874155891e08285f827ea259d29ced4dfc97437d82816d10d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7c8346f284ed0c6b_0

Filesize
252B

MD5
39fd2e818742b6acc46cf2f337ee641b

SHA1
a9b7b4f121f9dbe19d394b1d813eb8c3d64d1527

SHA256
a224f8c9da3ed4257cf0b92743956963a2a157f7b6c050bdc9f38c52ba38c227

SHA512
0ca57ad8a7d7e02043be79671fa18802bd6fcee7af4f0e6ebe91f878d82b1b15715bad542595bcce01849f1e4926500af0777674cb4eb44bfb055c17c2316253

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\84411b2127fdd823_0

Filesize
53KB

MD5
427409ca6bf0a7eb55f7f1844c031178

SHA1
25e929792ecab2186e41149160d76c9b66c3bf96

SHA256
e916e2f64a9740df498cfd92c7cb7417efcf12c4d5ceaa55248a1b453681d433

SHA512
bde1c8e61a17c60252719a1a477a078a5aa03c5d629609e428152a434e4b47125883475067310b98ab555b00f666e4a038d8f4d957d46efb6a97177ecad29fec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90d2397ca0a1f239_0

Filesize
131KB

MD5
bf23467263d0e572a1e452edef43e382

SHA1
069bce5fcea9f7fddde0074f4756a637685f261f

SHA256
ed0fb657db28c52cb648aeeac183917422d881b5183e879d1540e452a055195d

SHA512
7ec007d47280bd368b850ab2dfb5df5192db25eea595e1a0bea89b7adb8313d69a19a813053fee98e32122b910d6bc9252f778877d63c5c79a1f321fc26c0953

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\93fee1147413fd17_0

Filesize
11KB

MD5
435f9b156fa0fa4409024a3018bed8df

SHA1
670a25166d589c51953959a6a3df6a36d18bb501

SHA256
97065c19174a33cf6cc1219b70b9c342a42c2b517079cae32b568a8637966eed

SHA512
6ac6c3584f04e24c8725ee152af287ffdf64b586f078e9d51bd02ce73dab2b5f7918d196b630c56d639f38e6a625fb724153434d7d988e5973bbf0e8603b0bd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e04f19de8f5d184_0

Filesize
260B

MD5
9abea4e60c34187b4605959f28b952a3

SHA1
cd5031ed2dbcc4379ac1b5d0c8ace0de7e9c958c

SHA256
8117a9a8fe6f72e56fa37b6a78bc4978cf8d7a8bb68ab7fe93b0db9f155b241d

SHA512
8e4ffffd63e4984bfea9ed72ecba68bbfeef6662c59ae1f8303a828d44da56fb48bbc7795dc8c11ae8157a0f547e0f2c7a05f2d5d2f1d7a3f288a64bb3e0d695

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc0276656709e65b_0

Filesize
259B

MD5
091612c8b2858c7737cef853172f2ba6

SHA1
ce006e8b4c9b296e799974fbf27da98683efa8f2

SHA256
862218636bda2e4caa53cb2f9d175e12a4431750e486cc67d0d2c0f5126e7c48

SHA512
e95acd8223b0742fdb46e063ef496b095bfc0ab007f014b87e62dc4f3e5fa60567ce9938430b4064086ada3a1c9fee734e5b673eac78c9df66c92ea2e52b189e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c43716bae4250865_0

Filesize
339KB

MD5
c1cd99fbf74f3c0b4809362da490a9ca

SHA1
76158a096fe0a6deb33b1353189af473574d0d80

SHA256
5dc4fb224a98ebfb0506736e708abe2f802773ff73b9fc920ec97155dcb1e0b4

SHA512
7a29fcd978d51c4890e6b1a7cc0b4c26deb19e3abb892bba486ee273a80825e72419d2d2afe069d174d59d4907e611441737e2dc95507868129924fa6a680a6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca6ae80b7620421b_0

Filesize
252B

MD5
e37aed47b9a7d288bd8f5588c0b2a0de

SHA1
4489e02c3d2088437f6cbeebd53d40e6be4f4eb1

SHA256
508b447916350ace49e6ea43df90fb5964448bf6f027371b7c7705f36e9e5059

SHA512
cebfc14f196cc0700204230ed4fa66412626bdac9645af9faed18987513ee2032ffa6dadf494848b207e7ef42a4d1f020475b315938d2eb41e73f033f2559403

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e201db4afc7e2e56_0

Filesize
307B

MD5
ee0b2f21d245540d9a7b9b2119d93db3

SHA1
3a9da05d827bc57d1e021c3c8bff3d0e2de710fe

SHA256
4986490f8e32795670f016369bf41906ec873eb8eebb04af1be071311e74be08

SHA512
5ac926ce0e49f74ed57ffdc5e1814fb6430385468c9f32dac8e70866fd7beb83d3a77eb904fb07f6a9b3d222b679d63640a679241c59aba688756d3cc3112d52

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e23fd143df75dab9_0

Filesize
277B

MD5
7567bd907f0dc96fff7088b57907c9e8

SHA1
ed9f294c48793a5805e873032cb6d758df746915

SHA256
7d6327a2d820ff62d1c7ada68e7f4e024c4053bd98e3e807f0d9b4d29bcaa358

SHA512
81c69f55bfb850d690be7fa162b1bc805eba36515999282ab3684cd01b60d4bf7aadb547c2da87d9fb178a189856b2e38acc47898c6ae9396cabdeb7a241586b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fffdae0d46c6c8ae_0

Filesize
22KB

MD5
dc472ce6a5a83ae43434ca639f2b8a88

SHA1
20acd21be7f10ce3c1146ca01c3a1213566fc241

SHA256
d1c7828ea0ff9cfb5ab2d4724ae401233a1e7ebd504453691f489b2954992647

SHA512
8f080d50becfd6f5e94a5d194df2e305b41bea9e1ff6fbb37ba0d06808981c024da9c95805a74c7ac39024301e136b20eaaf6fd3d12d7ad9ba5daf0ef1a522cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
7225e910ae37d423fcfa3ab1d17fb094

SHA1
9b8509548a1844ec7357fd9384641ccc87615065

SHA256
958673503e67f008864516e5c997dfd7e0da310984da5e24d239f817ae32dd4f

SHA512
158d92af74de169adcc19d9bc8df8749763ca26231ab1e2e2083b9ce772cc222cc521feec176487cd99e69a4d27871ef386f9198f1d02b4954071127c2c4675a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
10KB

MD5
5b4aaa750d10b0db8213fe6f8e0a0549

SHA1
07edfcd810e3bc34577f0af610b2c91b75af0158

SHA256
c71f8bb31784f02355c84a2c249a40a905622ec25ef0f4096c5ddd7f44b3b3df

SHA512
3b7f6996efc136e8051968085408dd8643cfc259924a412f4b75041e3e5bf7e1ac9c3cf4773d6d9f4bafda6b413390dbe072f36331fb7a0bc377aa52545109ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
9KB

MD5
3a16d6f869c6abd7f223f7d6c28d60db

SHA1
1c8d3cca4c6f3b7f4eee69f206028eeda01e1f20

SHA256
fae716f363a6f29bf4a6b8f9c99beb007b199b2dd79cf12bbe29fea9a4e0c4d8

SHA512
0a8e5e638666900346005d8c99b1653a7c7b4b10cb348f79e4b79629e67476bca7c456d44ec32173e0921d7c3a0053bb5c4a0647d31d49a886fa00ea421a132b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
96B

MD5
b04f4e8a26d8efc28454ced0b6a81292

SHA1
c10f8321589251b4e0336e6847e86726b3f01c12

SHA256
80d7e365b9215864c3d37f4bdb9843bf7b95a058833004a318aae91fc487f9dd

SHA512
e49ecef077d601e36f5c2cef5a9321dd4fc27d847f5c693a79fe1640b168f752d38f706746c7c1f96d76a89982f249900fac77e11ba3180997db6d981da2c6a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
10KB

MD5
3a18f33905384f3252f0df073b376896

SHA1
6b1622a8fb8c4cb08244f30aa3c6b3a192d10516

SHA256
ff3f8dcbe5eaad24997ddbcda91d4112e49ec3dbc90ef717b22bacfb484987b1

SHA512
c9de39eb900a015848fa9b693d533e72557159c397061ff4548e8fa7fcee6c1fc8483ce7ea461f3a3ddf7248e9c108b4b8a52f3ffddbb62ef8bf027b13b6a6d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
18KB

MD5
0515c393cdfc6249c9d5dc0db49e6a70

SHA1
c2b636e3eb59116b8a06776bb90b11089346bc4d

SHA256
a5f3f5cee114aa696985b665b7d70fcf05df826e5f7eef2c315146b0fcb0a3a7

SHA512
a4fcd9804795ccdd55e1bf850af23ff7020046e781c391d3ba1fc776e72621da15d679238ecf820ed92071f3a40405a76f0f1c78ccdfa98c12623a1978ee2fbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
201fad0f7a9dab7507245b6586c7e712

SHA1
15f148e32f6613f755ec8087fcd479f91e11aa0a

SHA256
854aeaffd035218b430b7232d612b01fcecb20c68c47e30597a370073ebafe2e

SHA512
3de991fdf40e6075c574bcd61b713539584d3c238d5ca5786d1c81d551254e659e706e95dfc61e8626403c5e9dc8916b494bedc2386e84d8b5c37339b50187be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
78906a804783601e5e36b675b3781177

SHA1
bf144d3aef3b45989275b79a4f1eb3eace2df20f

SHA256
632aba6c66fb55c01c7850c7a838776ecdcb884ebee9b7dee55a365d3560f4e2

SHA512
442c5b9f2803a473e277385c980a518c2336d60f31bdcefe469e0d55b870b0e11c589842b5ec2edcd42de792d6a50018bbe141eace32ebf3bceba1f185473530

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
886fd3bee8abe318d98caea5744650e9

SHA1
277d975c0299ac5047b9b7c046f76ea2e82648c0

SHA256
19d2395952e01992151bbebbf5194416f5b2ee5ababfef97731e9b8aa74e2a33

SHA512
ab678edd9752f79aa4111055fa8dd5c9045a97d3238fb230f00f3c3adb49aacd50ef032d15916b4827a500512eeff5c35631e1a8e7b79d8b9ffcd4cef5c0f853

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
17KB

MD5
80dd9d5e85b951226173bfa3648c0d19

SHA1
dd10f3f76feeb9a3f738636e1a3b0ab53e4eec3e

SHA256
8fd97e51fe3c834468f9baf53a5446e12a243a93da35c6a7fd24d30734dee4d6

SHA512
dc0c1126d0ebf5070daf5be1bfe6b36dd1a2ede18da33e57bee5a12493bee9da5962c674c93097f9a0ae67ad5b4b36dd449ce15a62d8dd9406bd085926d1d34e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
901c3a979b0efc9b547ba431a83e7a54

SHA1
0ce7382456237d8e034e8c8b9055ff32f4d67e20

SHA256
a4a162047bd0abc3c300a1e706e43b1ea5aec7cb502906d964d2feec125cadd0

SHA512
f5d618774eb171c3d4b37b74b57dcef97f6499adcdebebe582f01da54335825497881a6413ddd4ac57b52a724161536b752b4b2794cbea05aaa3f08ae5343568

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
1e776cdf60bba60b1067a21f95077d4e

SHA1
2d52c3e4ccbe26f5a855af486661b971e3adb4cb

SHA256
5adba690e7112b66fa8dccfedee9810bdcb5d798d2bc3d8d30be0532fbd5776e

SHA512
89b462cb615407c012be7f5d7f48d599e9581ea6d2c3f03d8d625ca965c7298eaa990d427819236bf6394a06774fdd8e5a380488b5bfd25eb522e2edc92f8bc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
115df4be47ab2e9ba74b4fc10b0da485

SHA1
9765fafced8b5df3f5f42866b0464cd9190c7a28

SHA256
40113eda610adaf38812147c32e99dbbced700737cf77030e1641a6843e2a015

SHA512
32ee86ce2b61cabda3cbac57201d394b3a955d00e55b40ba8f33be36b82c47f702ada3fa28b26a8d57d4366b2be949356e146977fe489314b9b58972077745dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5e4ddd74becb442108627dfc4ea36135

SHA1
2b535995c29231495dca07b0a87a5075e0a327df

SHA256
c67a65c3bada22344a1749cc1ed2f48eefb47f04d4c532471084c1823386c2f6

SHA512
6f834e2d91ad25b56146259f5e79efb58a13a957b4e0dbc28143a3b96a64405b1306739bc1dc533348be1c84fc08d64a0cc69b08ec2a9dfd62cd7ebba3d18694

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
61826484fb1e8eacf5827978cc32b6e0

SHA1
ca253e365e6c63157cab9ae0e9db2b2e1e3f1a13

SHA256
6355997eff5014b215b7e7740023ca1ecf53f1542dbac5e106426527f8f3c046

SHA512
66e7a2502317de3490e1b49c7f73b6fbe86adfd7ccab5ab5f9857c9eb6443d05c74b0da27db8301f298897cb71d84dedfc82b384973e2a3b147d0c1c5c807bc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
7912e8d9499d856296d4ce2438c53f9d

SHA1
725191b8ac672b68d11fbc37b7ff394f43dac96a

SHA256
24adeddd11bf18eae7311e3eae632a1d68df6b9bd1eefc5f6505922070329e82

SHA512
9a06ee19eb5ec8ce8d157a6ad906af908ab3433ab569720c2bdc68b3fb5f6571a77395103f862ed837a7f3a6d2372c4a9c84e9a8ac443a9442aa1cceaf2985c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
01a74466bb77686500e6c5bf05c4cb0a

SHA1
e1837a7f351171c54bd0275459fc1c91f5ff5eb8

SHA256
f26101ef96f668004af639db75b85699ea6f5872ae7157d8fb702ec26ac47b19

SHA512
3d58015e556c42b1bbd21cfec73a4446673ae3759ceef06e1b5687c70d48455366cbde692809e9e3aab8c4792c46a264ef61eb06a1e03504e80b28d1bb1a42dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5800f5.TMP

Filesize
48B

MD5
680e020f4e6c43e033e9f94099e77c6c

SHA1
8271b697106ae4815f00a0e5411264b39d147d8b

SHA256
dedab2d97d37af49f74bcf8c185a2034ff1f44487ffea86595973ab61af6fffc

SHA512
061c1924b7cda1d8a9cde3f90a6d27dcd8cf37b4abfb275052ce22f405d97fa565e2f7c9ff13b84b44ee36a0be3d497afbef5804518444006d81640c8f6e1ae7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
58b7cf7f7964e4c1795d89e2f1f49fae

SHA1
0891acc4946532032d3d775d84d8dda2e484f40f

SHA256
13aa0c3bcea5ce3312a22bf8d61d85294498b79da7a05f075561be41ca0e3aef

SHA512
08eab4899e22e5284194bd5cc8b79bd3beb89626461c78671220c659a4f5807afdc4476ff8d4393016130c0a36617456623b895b02e7bfd28d43966f37be53bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
448c6399865ba275c6456177b3575329

SHA1
0352470863170e2118c648b5646f7764e440db46

SHA256
3f7f332d101d33ada907818d3c62dcecf3582735504de8042579e66bf3c11719

SHA512
bac04684f73ac1f300325362a365db2400e67a0160f1189397b3b256c51c8cb0ec130a18a98b5f7471055959b173749f8fcf4164a5a3fb69e53e7da4b63d1627

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
c07a74531f6fad760142956f197b3e9b

SHA1
cf7172f4e776540e04f8e5480c05bf00b4e5d0fe

SHA256
41f2457af9c11d8fbc5ea5d30e5cbfdbae1d3cc466f7cd3528415edb77690a1c

SHA512
afe28de020d9fd34c585c186403cf5950f12984c2826e5b32d6e16353b291e883934e0ffd0e0a09feed62f8a3ef62549c061925bc22b07272ba631a83195d3f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
45cbc34e9a38b5f96f7e51d15a29dbe2

SHA1
f7580e5c0e28cd56dba50e5aed4811f29d940687

SHA256
0ab3166af51f4ddcfffe8eac402f6439514e5809112a9b39b0e6371989c0a3bc

SHA512
87f254a89e6f4b1b3bb044166ed521fba241ce5c3d16b5d61efc3ad664b30054bc607db28f354b484f7ce4144cd31316d61090585b627ea0a7814d413b982c39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8cddf7ca04e3f4357feea9eede19bc18

SHA1
d3c19eff562006007ee5fda965b045a23d57eec8

SHA256
c20d687bff7f95b9f114912205202dd6745d56154297d910ffc48fd2812c3990

SHA512
0f6f56381877e0d8103fd3b216e255e09f02ee255b2ee1268a12778d9d443de5d0704271721f10ceea6166f594894f99b2d8f0c3b1b13be11ca8685dba709c1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
cc7cd882145e98820cf5160e3f222c14

SHA1
15bb8188d39d037924562c1ac99063f198e97787

SHA256
387da592c06de055c3abc748ef3aa2677b07f622085ad14b40ab97513a86c164

SHA512
f84a49603abcbc92587d887c640804aba7e4b1fd95c7aa62f99c8330216d755ce68734ca4cda36bf149d16cdfd6364b584a2cc385fbe6c260c294bfb71d4db77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
32568d5a9873a31bd6ff32abd60a65d1

SHA1
d90708a09593ee776db54ea8cb3b68831215a7f5

SHA256
c5dafe506be1825bd900c9dfad26fae100371ee92ca91091aa01521b187a5863

SHA512
03fe90cbb30de61ae3b7ab89fa7588723ade356852407c06b8256af67e04a10ce9786d84fdd58fcc20bf5a0f45a2a25231ad7d2fece431cf511f072de54c69b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
9c39c5e2fda42c5ec1edb88239eda7f7

SHA1
9fac7f499e359c5d73ebb2d16c01127c24f889f6

SHA256
bb3ef0291d45df51d449b3fd578cf76cf2f38de63b96ebe3e0b4acc97f585784

SHA512
e5461a63ad5a8e272c5430b33e68030d7e18cb0acf1d24945294ac1dd994df4268affd752c27fdcd4a1a3b43322cae148697b511b09f3dcacf7de24fb582be53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
84da5bf254191cd0c57a8dedbe897db1

SHA1
f85c94e56fbb3297d189b12d324452b939f2b6eb

SHA256
5c50f82130d04b5d925aaea16dade4cdc3b1135c2bb6a213498fe4ac83e0c48e

SHA512
d4cfdecb2bb37bcc2ff10e998b6b3ce9598ba5a73269cdc575da08f3b02a3d64cae99a4f415682609182c96ca33e1cc489ac38e61ccf0efa718829855c4a5cdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
4e6d82d0b5b3b95e018094ba239a9441

SHA1
42adb8c917d9e73adc8da010fd649e86df88ddfd

SHA256
98994a1ca5f7447ed11b8b0aefbc394721525d9fabe8dc90206edb139fe69f34

SHA512
04f2d1a8b93d47502c7473486f767736986fe82f5b981175579da9249dc15e87d79434839de4546e4fa2984e56432b9f8b6bc31406e5f2c5a622bd311257a9d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
d861d69c7469d695c595571d529ecd58

SHA1
f1cbe278fc8d61d81e934e7d59771155d591d939

SHA256
ce11d9d89d3ad32990e5c26439e133ec79f8c626e9419402ca14ea8d818c540f

SHA512
7ac225a29c134683a34058128efdf6b201ad83c186159068cb2564ee979479420827413da179d4a2c5fe317739da5efd9bf4375e999a7853923864ea1904716e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c7c4.TMP

Filesize
371B

MD5
5ad7783da90e096ec0c0d434d457a055

SHA1
1573d824cd3e931ad61bf366450752745272d537

SHA256
6cd0882c24b8a5dd13e2b5f238cc13682e92c96224aab715f3ce7ffcd461e67c

SHA512
2670ce1b46d6e0814468b2d637f17683f9373fba6caefa96a84b784bf8bd6e659fb21682eb8f06f6d9598599ee4617cd2b397e93404220f2a6d6915f050f3aad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
461f0e8b142570d42db6b239c118a754

SHA1
81a0bb4e6c6684c852050ee8604fdbfcc586f38d

SHA256
4826a63f7054dc4cdda809441df5b258ec282b8fa8d0db30d50791f90b0f72fe

SHA512
b38dc3b75d4954ef1d3f3135a39493612630a564c0d0103b8ee28cece01a34b848bbad02f0ea3becf34e588bb54a8909d144e795ceb123aaf1f2bc462c77972c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d28c744f61cd274ed1f4d93e31fb5c10

SHA1
646dadb30ea37c4bf3c7c74f7e7f2718c4edff37

SHA256
e3e127eeddce4f77aa37cd039a971eb81ff0b952b42bfa7eb2ee1d294482fb91

SHA512
0a95a238b9ffb24895fdbfcf21777f5e212baed5321827491e288c496a4587471c83be21fc15e966ca0c617383afcd7f32787820a26108153b5edf35af4640ba

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
11KB

MD5
a76320ebaa4d31ee620985289a64a381

SHA1
923afd7d4291ccaf639ae6e6bfacf8039184ff15

SHA256
596483c5fdaa976d7f18127d69b6b88dc56fb88cc16375d46efceb32ae8bb743

SHA512
1d995f3e640c8be3907efc0128acd3fe5af098c5f1c59a5ca1a368c8fe5d566a4fb4d8333432adaf7d23bd4b70bfdf93786b676eafb3accfd62429d9da1825ab

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
11KB

MD5
a031db08bcb9da07245d0688e56e0e85

SHA1
89496e2014ef55e42c55aa8f0e162b8afbc80df5

SHA256
ab24eebf4cd810ddb3af758db4915a08c4ff12bd8b9d9c65afaa59142e559b0e

SHA512
9ed72ad72816b4b613127f93976d89ffe275e57613de3201e36f2de122ff6dcd97f65c3541c882e32dd312b546cbffa27b7c0976fe334db39d2e576ac9126de4

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
12d862a764ee42e43019db9f21ae4961

SHA1
6ccdfe8f0abfa1d36bb6e39634858a2a02c45e09

SHA256
d510330c40016584a734056b4dcc9c70f8fa386d151db17056b0bc2318a9d1d7

SHA512
af24332c793bef96189d4b75ed0d8d04bbd9148bbfdf3706177e17df599c67b7cd5f5bae23f75a11ff7ff87defb77b326ca93543a7dd8dcaeef824e78fa7f9c3

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
fcf18702ca9b35e974b8b5befa9e77f1

SHA1
df2315a91922b90c3881f136eac88603229fa1e7

SHA256
06bf74bd39d207bc91e8c862fe07090b98be387bb3e5ab54cc9d06766a995d0f

SHA512
a3f3aea15a63ad18baadd32fc1624f7fcd4c386c40f7f021224ab1d9efc1d3aa77b17792ab22e76705fbb43e3336f411863231cdf69ce2a5ff6e4f16ce9a7dc8

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
7121e6ad3c62d2eb2e9de1fc97345d1d

SHA1
a9c48aea4e08a96967dd31b2bbe21a054d2f72f6

SHA256
577607c54c59c253a9b3a673e7647db78af2e3b58d37a0ce178618f9bc87045f

SHA512
ea0726f6a962e3c227aec798947990a09e4a17a244dc9210c561e25b56838ed8fa6d46ea7f99ef408ee0052f1d0d6e65f0b5087736e126fe06f59182135421b5

Download Submit
C:\Users\Admin\Downloads\Desktop Goose v0.31.zip

Filesize
4.1MB

MD5
eaad0961b52b14d9a323f092ef307d8a

SHA1
feb3aedf16432b063ff93c90623a865a1fd5214a

SHA256
e66264065923676807fd6d7b36f7c9dc52db9ef1c5399b2811738eb5e22a30f6

SHA512
fc42d2ed6a8a8efee0898236526dbe46218dbec657caa5e70bcb18433345d56a010903c155c726a5c9e117e1759cae42560e18da49d5bbfe4e99048fbd326330

Download Submit
memory/1104-2901-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2957-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2899-0x00000000064D0000-0x00000000064DA000-memory.dmp

Filesize
40KB

Download
memory/1104-2900-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2897-0x0000000005130000-0x00000000056D6000-memory.dmp

Filesize
5.6MB

Download
memory/1104-2902-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2903-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2904-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2905-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2906-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2908-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2907-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2909-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2910-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2911-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2913-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2912-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2914-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2896-0x0000000004AE0000-0x0000000004B72000-memory.dmp

Filesize
584KB

Download
memory/1104-2895-0x0000000000060000-0x000000000009E000-memory.dmp

Filesize
248KB

Download
memory/1104-2933-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2936-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2935-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2934-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2937-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2947-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2949-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2950-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2948-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2951-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2952-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2953-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2955-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2956-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2954-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2898-0x0000000004CE0000-0x0000000004CEA000-memory.dmp

Filesize
40KB

Download
memory/1104-2960-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2959-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2958-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2961-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2962-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2965-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2966-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2964-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2963-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2967-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2971-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2970-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2969-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2968-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2972-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2976-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2975-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2974-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2973-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2977-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2980-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2981-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2978-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2979-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2982-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2986-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2984-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2985-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2983-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2987-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2990-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2989-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download
memory/1104-2988-0x0000000006BF0000-0x0000000006C00000-memory.dmp

Filesize
64KB

Download