hijackloader | hxxps://haxpc[.]net/stardock-start11/

Analysis

max time kernel
833s
max time network
832s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
05-05-2024 16:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://haxpc.net/stardock-start11/

Score

10^/10

hijackloader discovery loader spyware stealer

Malware Config

Signatures

Detects HijackLoader (aka IDAT Loader) 1 IoCs

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\start11 crack test\bentonite.cfg	family_hijackloader

HijackLoader
HijackLoader is a multistage loader first seen in 2023.
loader hijackloader
Downloads MZ/PE file
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.

Query Registry
T1012

System Information Discovery
T1082

Processes:

Sеtup.exe

description ioc process

Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation Sеtup.exe
Executes dropped EXE 4 IoCs

Processes:

Sеtup.exeSеtup.exeDavonevur.exeSеtup.exe

pid process

5676 Sеtup.exe
632 Sеtup.exe
6056 Davonevur.exe
1344 Sеtup.exe
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Suspicious use of NtSetInformationThreadHideFromDebugger 6 IoCs

Processes:

Sеtup.exeSеtup.exeSеtup.exe

pid process

5676 Sеtup.exe
5676 Sеtup.exe
632 Sеtup.exe
632 Sеtup.exe
1344 Sеtup.exe
1344 Sеtup.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation	Sеtup.exe

pid	process
5676	Sеtup.exe
632	Sеtup.exe
6056	Davonevur.exe
1344	Sеtup.exe

pid	process
5676	Sеtup.exe
5676	Sеtup.exe
632	Sеtup.exe
632	Sеtup.exe
1344	Sеtup.exe
1344	Sеtup.exe

Drops file in Windows directory 2 IoCs

Processes:

expand.exe

description	ioc	process
File opened for modification	C:\Windows\LOGS\DPX\setupact.log	expand.exe
File opened for modification	C:\Windows\LOGS\DPX\setuperr.log	expand.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

taskmgr.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

Sеtup.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Sеtup.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Sеtup.exe

Creates scheduled task(s) 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
persistence

Scheduled Task/Job
T1053

Processes:

schtasks.exe

pid process

5872 schtasks.exe

pid	process
5872	schtasks.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 64 IoCs

Processes:

msedge.exemsedge.exemsedge.exeOpenWith.exemsedge.exe

description	ioc	process
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupView = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\Shell\SniffedFolderType = "Documents"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe1000000090bc7f32d697da01e0d22fceda97da01369367c30d9fda0114000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "4"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\MRUListEx = ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\SniffedFolderType = "Generic"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0 = 6e00310000000000a558258810005354415254317e310000560009000400efbea5582588a55825882e00000091350200000008000000000000000000000000000000ea8c9b007300740061007200740031003100200063007200610063006b0020007400650073007400000018000000	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 020000000100000000000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\NodeSlot = "5"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\NodeSlot = "6"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exemsedge.exe

pid	process
4428	msedge.exe
4428	msedge.exe
3956	msedge.exe
3956	msedge.exe
544	identity_helper.exe
544	identity_helper.exe
5264	msedge.exe
5264	msedge.exe
1692	msedge.exe
1692	msedge.exe
4608	msedge.exe
4608	msedge.exe
1928	msedge.exe
1928	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
5220	msedge.exe
5220	msedge.exe
5340	msedge.exe
5340	msedge.exe
1916	msedge.exe
1916	msedge.exe
1660	msedge.exe
1660	msedge.exe
4608	msedge.exe
4608	msedge.exe
4520	msedge.exe
4520	msedge.exe
5248	msedge.exe
5248	msedge.exe
1248	msedge.exe
1248	msedge.exe
756	msedge.exe
756	msedge.exe
1356	msedge.exe
1356	msedge.exe
5316	msedge.exe
5316	msedge.exe
4368	msedge.exe
4368	msedge.exe
6108	msedge.exe
6108	msedge.exe
972	msedge.exe
972	msedge.exe
5436	msedge.exe
5436	msedge.exe
3196	msedge.exe
3196	msedge.exe
5676	msedge.exe
5676	msedge.exe
4288	msedge.exe
4288	msedge.exe
6116	msedge.exe
6116	msedge.exe
5124	msedge.exe
5124	msedge.exe
4488	msedge.exe
4488	msedge.exe
3228	msedge.exe
3228	msedge.exe
5220	msedge.exe
5220	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

Processes:

msedge.exemsedge.exe

pid process

4608 msedge.exe
1928 msedge.exe

pid	process
4608	msedge.exe
1928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

msedge.exe

pid	process
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes:

taskmgr.exe

description	pid	process
Token: SeDebugPrivilege	5260	taskmgr.exe
Token: SeSystemProfilePrivilege	5260	taskmgr.exe
Token: SeCreateGlobalPrivilege	5260	taskmgr.exe
Token: 33	5260	taskmgr.exe
Token: SeIncBasePriorityPrivilege	5260	taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

msedge.exe

pid	process
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

msedge.exetaskmgr.exe

pid	process
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
3956	msedge.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
3956	msedge.exe
3956	msedge.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe
5260	taskmgr.exe

Suspicious use of SetWindowsHookEx 24 IoCs

Processes:

OpenWith.exemsedge.exemsedge.exeOpenWith.exemsedge.exe

pid	process
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
2052	OpenWith.exe
4608	msedge.exe
1928	msedge.exe
1928	msedge.exe
6028	OpenWith.exe
6028	OpenWith.exe
6028	OpenWith.exe
2240	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 3956 wrote to memory of 3624	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3624	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 5064	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 4428	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 4428	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe
PID 3956 wrote to memory of 3284	3956	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://haxpc.net/stardock-start11/
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4d6046f8,0x7ffe4d604708,0x7ffe4d604718
2⤵
PID:3624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
2⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4428

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2320 /prefetch:8
2⤵
PID:3284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
2⤵
PID:3752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
2⤵
PID:1232

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5344 /prefetch:8
2⤵
PID:3228

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5344 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
2⤵
PID:1224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
2⤵
PID:2004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
2⤵
PID:3184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
2⤵
PID:1368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
2⤵
PID:4088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
2⤵
PID:5236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
2⤵
PID:5456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
2⤵
PID:5464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1
2⤵
PID:5628

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
2⤵
PID:5636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
2⤵
PID:5836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
2⤵
PID:5948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
2⤵
PID:6052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4860 /prefetch:8
2⤵
PID:6060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6572 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6496 /prefetch:1
2⤵
PID:5368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
2⤵
PID:5256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6492 /prefetch:1
2⤵
PID:1036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
2⤵
PID:5808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5440 /prefetch:8
2⤵
PID:1720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5936 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
2⤵
PID:3548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6900 /prefetch:1
2⤵
PID:5276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2188 /prefetch:1
2⤵
PID:5588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7452 /prefetch:1
2⤵
PID:5616

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7712 /prefetch:1
2⤵
PID:4808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
2⤵
PID:4088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7976 /prefetch:8
2⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
2⤵
PID:5680

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8224 /prefetch:1
2⤵
PID:5884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8504 /prefetch:8
2⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8260 /prefetch:1
2⤵
PID:5688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5088 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:6116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8584 /prefetch:1
2⤵
PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8632 /prefetch:1
2⤵
PID:1988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1048 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6164 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8420 /prefetch:1
2⤵
PID:5796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7980 /prefetch:1
2⤵
PID:764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6940 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9200 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9156 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9168 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9188 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9212 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9156 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9168 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9188 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9172 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9168 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:6108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9172 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9160 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9140 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9176 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5676

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9172 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4288

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:6116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9200 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9188 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9164 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3228

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9072 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9008 /prefetch:8
2⤵
PID:1808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9212 /prefetch:8
2⤵
PID:4604

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6480 /prefetch:8
2⤵
PID:5532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9184 /prefetch:8
2⤵
PID:1928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9132 /prefetch:8
2⤵
PID:5860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9192 /prefetch:8
2⤵
PID:6116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9212 /prefetch:8
2⤵
PID:4584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9136 /prefetch:8
2⤵
PID:1892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9008 /prefetch:8
2⤵
PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9120 /prefetch:8
2⤵
PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9192 /prefetch:8
2⤵
PID:3200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 /prefetch:8
2⤵
PID:1248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9136 /prefetch:8
2⤵
PID:436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9072 /prefetch:8
2⤵
PID:2520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:5208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9196 /prefetch:8
2⤵
PID:2768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9140 /prefetch:8
2⤵
PID:2076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9160 /prefetch:8
2⤵
PID:2908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9152 /prefetch:8
2⤵
PID:2220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9120 /prefetch:8
2⤵
PID:928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5336 /prefetch:8
2⤵
PID:3256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:4512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6284 /prefetch:8
2⤵
PID:3732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
2⤵
PID:2812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6480 /prefetch:8
2⤵
PID:1904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9140 /prefetch:8
2⤵
PID:2672

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 /prefetch:8
2⤵
PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9196 /prefetch:8
2⤵
PID:3684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9128 /prefetch:8
2⤵
PID:6052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9160 /prefetch:8
2⤵
PID:3696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9208 /prefetch:8
2⤵
PID:5520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5336 /prefetch:8
2⤵
PID:3228

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
2⤵
PID:4520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9196 /prefetch:8
2⤵
PID:5372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:5832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 /prefetch:8
2⤵
PID:404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 /prefetch:8
2⤵
PID:1512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9064 /prefetch:8
2⤵
PID:1344

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9176 /prefetch:8
2⤵
PID:3696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:4692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9024 /prefetch:8
2⤵
PID:5560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:4584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9212 /prefetch:8
2⤵
PID:1892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9160 /prefetch:8
2⤵
PID:4280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:3932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9116 /prefetch:8
2⤵
PID:2832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9072 /prefetch:8
2⤵
PID:2312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5336 /prefetch:8
2⤵
PID:3588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9208 /prefetch:8
2⤵
PID:2536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9148 /prefetch:8
2⤵
PID:2436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9072 /prefetch:8
2⤵
PID:3268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9144 /prefetch:8
2⤵
PID:4436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8176 /prefetch:8
2⤵
PID:3572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8132 /prefetch:8
2⤵
PID:4980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8316 /prefetch:8
2⤵
PID:3872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8120 /prefetch:8
2⤵
PID:5812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8140 /prefetch:8
2⤵
PID:4900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9160 /prefetch:8
2⤵
PID:4764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8224 /prefetch:8
2⤵
PID:5320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8316 /prefetch:8
2⤵
PID:3684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6312 /prefetch:8
2⤵
PID:3592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 /prefetch:8
2⤵
PID:3572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9116 /prefetch:8
2⤵
PID:6052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8348 /prefetch:8
2⤵
PID:2856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9116 /prefetch:8
2⤵
PID:3588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 /prefetch:8
2⤵
PID:2916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3192 /prefetch:8
2⤵
PID:6116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8352 /prefetch:8
2⤵
PID:4208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8
2⤵
PID:928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9188 /prefetch:8
2⤵
PID:1912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9084 /prefetch:8
2⤵
PID:1096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9008 /prefetch:8
2⤵
PID:5280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 /prefetch:8
2⤵
PID:5232

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8248 /prefetch:8
2⤵
PID:3612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8280 /prefetch:8
2⤵
PID:4692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8292 /prefetch:8
2⤵
PID:2536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9192 /prefetch:8
2⤵
PID:6012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8288 /prefetch:8
2⤵
PID:4840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8220 /prefetch:8
2⤵
PID:876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8288 /prefetch:8
2⤵
PID:5076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8220 /prefetch:8
2⤵
PID:1636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9140 /prefetch:8
2⤵
PID:4272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8284 /prefetch:8
2⤵
PID:5280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8224 /prefetch:8
2⤵
PID:5812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8012 /prefetch:8
2⤵
PID:5668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9152 /prefetch:8
2⤵
PID:1904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9064 /prefetch:8
2⤵
PID:5660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8140 /prefetch:8
2⤵
PID:2872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8132 /prefetch:8
2⤵
PID:3584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7972 /prefetch:8
2⤵
PID:1804

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9064 /prefetch:8
2⤵
PID:2072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9152 /prefetch:8
2⤵
PID:1372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8284 /prefetch:8
2⤵
PID:1248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8112 /prefetch:8
2⤵
PID:972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
2⤵
PID:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 /prefetch:8
2⤵
PID:2768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9188 /prefetch:8
2⤵
PID:5732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8284 /prefetch:8
2⤵
PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9080 /prefetch:8
2⤵
PID:5684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8224 /prefetch:8
2⤵
PID:1348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8112 /prefetch:8
2⤵
PID:5852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
2⤵
PID:1912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8284 /prefetch:8
2⤵
PID:1096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6136 /prefetch:8
2⤵
PID:5128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8284 /prefetch:8
2⤵
PID:5124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8176 /prefetch:8
2⤵
PID:1552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8116 /prefetch:8
2⤵
PID:3748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8284 /prefetch:8
2⤵
PID:3268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9024 /prefetch:8
2⤵
PID:5832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8216 /prefetch:8
2⤵
PID:4816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9112 /prefetch:8
2⤵
PID:1636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8140 /prefetch:8
2⤵
PID:3752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9172 /prefetch:8
2⤵
PID:640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9168 /prefetch:8
2⤵
PID:1988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9184 /prefetch:8
2⤵
PID:1360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9124 /prefetch:8
2⤵
PID:4816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9156 /prefetch:8
2⤵
PID:5268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9208 /prefetch:8
2⤵
PID:6108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8144 /prefetch:8
2⤵
PID:892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9120 /prefetch:8
2⤵
PID:5704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9184 /prefetch:8
2⤵
PID:3580

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 /prefetch:8
2⤵
PID:404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9152 /prefetch:8
2⤵
PID:1988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3192 /prefetch:8
2⤵
PID:4324

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9080 /prefetch:8
2⤵
PID:1796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9208 /prefetch:8
2⤵
PID:2220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3192 /prefetch:8
2⤵
PID:1104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8312 /prefetch:8
2⤵
PID:2908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:2536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8176 /prefetch:8
2⤵
PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9172 /prefetch:8
2⤵
PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8144 /prefetch:8
2⤵
PID:5996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8176 /prefetch:8
2⤵
PID:4384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
2⤵
PID:3548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9180 /prefetch:8
2⤵
PID:2516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8304 /prefetch:8
2⤵
PID:3044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9168 /prefetch:8
2⤵
PID:5812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 /prefetch:8
2⤵
PID:1260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8176 /prefetch:8
2⤵
PID:4612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=208 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
2⤵
PID:2220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=209 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8800 /prefetch:1
2⤵
PID:3700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=210 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1
2⤵
PID:2572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=211 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1
2⤵
PID:4196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=212 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8812 /prefetch:1
2⤵
PID:876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=213 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8652 /prefetch:1
2⤵
PID:5592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=214 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8580 /prefetch:1
2⤵
PID:6108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=216 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7316 /prefetch:1
2⤵
PID:4916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7340 /prefetch:8
2⤵
PID:3872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=218 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8732 /prefetch:1
2⤵
PID:4612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=219 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7992 /prefetch:1
2⤵
PID:6124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=220 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8356 /prefetch:1
2⤵
PID:3688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=221 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8736 /prefetch:1
2⤵
PID:5316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=222 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8936 /prefetch:1
2⤵
PID:5412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=223 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1
2⤵
PID:4340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=224 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8984 /prefetch:1
2⤵
PID:5560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=225 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
2⤵
PID:3256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=226 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9180 /prefetch:1
2⤵
PID:3916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=227 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9288 /prefetch:1
2⤵
PID:5388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=228 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9416 /prefetch:1
2⤵
PID:2120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=229 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9488 /prefetch:1
2⤵
PID:5324

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=230 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9456 /prefetch:1
2⤵
PID:4896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=231 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9052 /prefetch:1
2⤵
PID:5636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=233 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
2⤵
PID:2896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=234 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8672 /prefetch:1
2⤵
PID:5124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=235 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8320 /prefetch:1
2⤵
PID:2672

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=236 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9740 /prefetch:1
2⤵
PID:2768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=237 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9248 /prefetch:1
2⤵
PID:3208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=238 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1076 /prefetch:1
2⤵
PID:5196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=239 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
2⤵
PID:4968

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=240 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6376 /prefetch:1
2⤵
PID:2532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=241 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
2⤵
PID:6136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=242 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3564 /prefetch:1
2⤵
PID:1208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=244 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8044 /prefetch:1
2⤵
PID:6052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9328 /prefetch:8
2⤵
PID:5696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=246 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2348 /prefetch:1
2⤵
PID:4872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=247 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9256 /prefetch:1
2⤵
PID:1356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=248 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9996 /prefetch:1
2⤵
PID:5712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=249 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10072 /prefetch:1
2⤵
PID:4488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=250 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
2⤵
PID:3876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=251 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9312 /prefetch:1
2⤵
PID:2536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=252 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9476 /prefetch:1
2⤵
PID:3104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=253 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9308 /prefetch:1
2⤵
PID:1360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4664 /prefetch:8
2⤵
PID:6036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=255 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8852 /prefetch:1
2⤵
PID:536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=256 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6956 /prefetch:1
2⤵
PID:1488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=257 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8484 /prefetch:1
2⤵
PID:1512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=258 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9532 /prefetch:1
2⤵
PID:3184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4136 /prefetch:8
2⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2240

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=260 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
2⤵
PID:1608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=261 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
2⤵
PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=262 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4772 /prefetch:1
2⤵
PID:5892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=263 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9256 /prefetch:1
2⤵
PID:2956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=264 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3592 /prefetch:1
2⤵
PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=265 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3928 /prefetch:1
2⤵
PID:4232

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=266 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10032 /prefetch:1
2⤵
PID:2624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=267 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
2⤵
PID:5176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=268 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8184 /prefetch:1
2⤵
PID:4992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=269 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
2⤵
PID:1128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=270 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9380 /prefetch:1
2⤵
PID:2728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=271 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
2⤵
PID:5164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=272 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
2⤵
PID:4748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=273 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6380 /prefetch:1
2⤵
PID:4464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=274 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8156 /prefetch:1
2⤵
PID:5636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3050443348615932792,5410322734544499856,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=275 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
2⤵
PID:5056

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4904

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2524

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5592

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Temp1_[FRЕЕ]-app_mаnual_install_v14.222_3450.zip\Read mе before you start.txt
1⤵
PID:5500

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:2052

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5680

C:\Users\Admin\Desktop\start11 crack test\Sеtup.exe
"C:\Users\Admin\Desktop\start11 crack test\Sеtup.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Checks processor information in registry
PID:5676

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\system32\cmd.exe" /c expand.exe "C:\Users\Admin\AppData\Roaming\ServiceData\c2Gt4H.tmp" -F:* "C:\Users\Admin\AppData\Roaming\ServiceData"
2⤵
PID:4688

C:\Windows\SysWOW64\expand.exe
expand.exe "C:\Users\Admin\AppData\Roaming\ServiceData\c2Gt4H.tmp" -F:* "C:\Users\Admin\AppData\Roaming\ServiceData"
3⤵
- Drops file in Windows directory
PID:4204

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\system32\cmd.exe" /c schtasks /create /tn \Service\Data /tr """"C:\Users\Admin\AppData\Roaming\ServiceData\Davonevur.exe""" """C:\Users\Admin\AppData\Roaming\ServiceData\Davonevur.jpg"""" /st 00:01 /du 9800:59 /sc once /ri 1 /f
2⤵
PID:2752

C:\Windows\SysWOW64\schtasks.exe
schtasks /create /tn \Service\Data /tr """"C:\Users\Admin\AppData\Roaming\ServiceData\Davonevur.exe""" """C:\Users\Admin\AppData\Roaming\ServiceData\Davonevur.jpg"""" /st 00:01 /du 9800:59 /sc once /ri 1 /f
3⤵
- Creates scheduled task(s)
PID:5872

C:\Users\Admin\Desktop\start11 crack test\Sеtup.exe
"C:\Users\Admin\Desktop\start11 crack test\Sеtup.exe"
1⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:632

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x504 0x2ec
1⤵
PID:2492

C:\Users\Admin\AppData\Roaming\ServiceData\Davonevur.exe
C:\Users\Admin\AppData\Roaming\ServiceData\Davonevur.exe "C:\Users\Admin\AppData\Roaming\ServiceData\Davonevur.jpg"
1⤵
- Executes dropped EXE
PID:6056

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6028

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:5260

C:\Users\Admin\Desktop\start11 crack test\Sеtup.exe
"C:\Users\Admin\Desktop\start11 crack test\Sеtup.exe"
1⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Persistence

Scheduled Task/Job

T1053

Privilege Escalation

Scheduled Task/Job

T1053

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0688c0c2-2761-493c-88f5-83a0ec2b6609.tmp
Filesize
6KB

MD5
7c504107283dc6298b38fde6ca31b5df

SHA1
54a551de4f2864e26c16fab6fc495a48c57131fb

SHA256
800bc681346f39ccc28dc0f8aad8ca3eed72a75b2f08387c5d338d5e6a7ac331

SHA512
a984c73c64b7cdfd649df092bd0af475f5052e22a1cbd86e7656770095ba5420eb15834a080ab290f82cfba24003ff1db9c284670baf0db91a9883b59e2d95f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\60c3b666-bdd0-4052-b797-6eed19927776.tmp
Filesize
19KB

MD5
6053b2bed77d93c23206bb8a72cf2d9a

SHA1
1ab6d505f7ed00382e513bf049d19e3d1a4bd1b3

SHA256
f2c9eb8a3b2decd0cc678f381adf3f9d3b618157d89b7df5f44fedfa4a44e746

SHA512
12fa551a418f9d9f00fe5ebb1821796b19e37142cc9212487a8088952a51f8c977bb536cd36ed42ff53a3d78a7a56539f9dbb2817d0e8cd8eed316e58270e405

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015
Filesize
67KB

MD5
d2d55f8057f8b03c94a81f3839b348b9

SHA1
37c399584539734ff679e3c66309498c8b2dd4d9

SHA256
6e273f3491917d37f4dbb6c3f4d3f862cada25c20a36b245ea7c6bd860fb400c

SHA512
7bcdbb9e8d005a532ec12485a9c4b777ddec4aee66333757cdae3f84811099a574e719d45eb4487072d0162fa4654349dd73705a8d1913834535b1a3e2247dc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016
Filesize
37KB

MD5
ad41c0bf481fc026fb5dd7bc5d42a587

SHA1
8d76e29ea2a0756681e4a018d06b941fc690c4fd

SHA256
2205a91208045c5071d38404e02305882d7920beeb6ac0aa56f52e63bd30eae8

SHA512
649bd4b3c4858566d6862a276d595b75b4ac8489559df676cf4275edfc6073013b9880dd59c12a43aba9c878542bb232e13188c9c74d46092cbba31dc49d63d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
Filesize
19KB

MD5
76a3f1e9a452564e0f8dce6c0ee111e8

SHA1
11c3d925cbc1a52d53584fd8606f8f713aa59114

SHA256
381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c

SHA512
a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
Filesize
84KB

MD5
74e33b4b54f4d1f3da06ab47c5936a13

SHA1
6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c

SHA256
535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287

SHA512
79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a
Filesize
1.2MB

MD5
5ab2d1f8cd709d40a8ea424bb51be98e

SHA1
5423cdf5c8eb1f57c0c330617cf2277b1283b6b4

SHA256
bfda89ab36691c4c6e8e8db2ee2b4bdccdb4d624410d97889f82c31d176facea

SHA512
912b41117f1603d903848822ad61bea5f9561c95049c1c689cb36be40f2cb58f7cc92fae4fd8b47297a127e816c657afa7bbbb3c087c21d80d9bc31639237dc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b
Filesize
32KB

MD5
bbc7e5859c0d0757b3b1b15e1b11929d

SHA1
59df2c56b3c79ac1de9b400ddf3c5a693fa76c2d

SHA256
851c67fbabfda5b3151a6f73f283f7f0634cd1163719135a8de25c0518234fc2

SHA512
f1fecb77f4cdfe7165cc1f2da042048fd94033ca4e648e50ebc4171c806c3c174666bb321c6dda53f2f175dc310ad2459e8f01778acaee6e7c7606497c0a1dea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c
Filesize
74KB

MD5
bc9faa8bb6aae687766b2db2e055a494

SHA1
34b2395d1b6908afcd60f92cdd8e7153939191e4

SHA256
4a725d21a3c98f0b9c5763b0a0796818d341579817af762448e1be522bc574ed

SHA512
621386935230595c3a00b9c53ea25daa78c2823d32085e22363dc438150f1cb6b3d50be5c58665886fac2286ae63bf1f62c8803cb38a0cac201c82ee2db975c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049
Filesize
64KB

MD5
3bd6e8b735a61d32c66e6c3750e903c3

SHA1
682c567a2bd2530afd794f5999030a03f56305c1

SHA256
809bafd21f2e8f5aee3c5b002d865086ce84e5cf4dc4a18c2e6d9f7ad88bbfc7

SHA512
875969bda2db5d4199f5105f49e50268b5aecc1285d7d86c2e8fa1cab1986de727b1fbd8e673244596d0ffe10a3517f0b8827fda4df6bfbc4f95f0bd192438be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e
Filesize
19KB

MD5
522502621a31eeb7679166fcc3ce06d2

SHA1
bb7a73cd079d8c8fc352c33f62af977ae74af51b

SHA256
af2fb87aa58032445c7a7a7b6465adaabcee921c3239815e65a4d278f0c3d7ef

SHA512
b6857be33675c179be673ef4fd070d22518f741b36e5f3ece37aafa8b699fcee353e85586c9c65a1499468e2fa2487575ec700e9c889feb2414a6a5628f532f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a
Filesize
202KB

MD5
434453f5a6ba088f49d670767c296f9a

SHA1
5d69e4bec480fe45cd0e58431bed8fbeceeae6cc

SHA256
c7d79f869196e3c79c053ba74a8f629116de8293a94f60cc851bbcd7977d0c2b

SHA512
5462b71da4314bfeadd00cecaf8801afe12cb319135763b026310a4694d8bb40b11f8bc055290870361e7235923ff2ee7fd285a9d9ec265c18d3c14f7829f959

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000080
Filesize
19KB

MD5
ba1bc252528a94df68abc4158c30a342

SHA1
fdafa2adda170ab9a2473aa741f5ed31a6f256f8

SHA256
fd8f7fd869509c751b5e841163cd4ff6dcd42d3fc5d884731f33d30ac647a1e4

SHA512
9c0c9b8322343f22f21a42426713c6a8f9a3f63f9bd9362eeca1d30fc4a4d911f828c480ab9b08f45d3c72565209356b1d916c2d8ca9ba6784651b37ccd32583

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008d
Filesize
33KB

MD5
1aca735014a6bb648f468ee476680d5b

SHA1
6d28e3ae6e42784769199948211e3aa0806fa62c

SHA256
e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a

SHA512
808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000094
Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000096
Filesize
139KB

MD5
4ef32833a3c010712781540b7a5809c7

SHA1
8a858827e63b98866633a83d71e2554993463de7

SHA256
6bb71a6ac4c55af0dfae19d3465ffb88de5a44187a73aae7ef5dfb7b857d0cf6

SHA512
a1427d76c22f15308b7fe825eae2fe34b4f98b630934ea4ff6ae805861ac66767c9ac0684cae0906e6085b8a509a051e7223a522b2ebf191188e01468a6191c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f1
Filesize
47KB

MD5
015c126a3520c9a8f6a27979d0266e96

SHA1
2acf956561d44434a6d84204670cf849d3215d5f

SHA256
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

SHA512
02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011a
Filesize
24KB

MD5
f782de7f00a1e90076b6b77a05fa908a

SHA1
4ed15dad2baa61e9627bf2179aa7b9188ce7d4e1

SHA256
d0b96d69ee7f70f041f493592de3805bfb338e50babdee522fcf145cb98fc968

SHA512
78ec6f253e876d8f0812a9570f6079903d63dd000458f4f517ec44c8dd7468e51703ea17ecce2658d9ea1fdb5246c8db5887a16be80115bbf71fe53f439d8766

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011b
Filesize
200KB

MD5
a484f2f3418f65b8214cbcd3e4a31057

SHA1
5c002c51b67db40f88b6895a5d5caa67608a65ce

SHA256
79cbe928773386d07f0127f256f383debed5ccea5ff230465bf46ec7c87319d6

SHA512
0be1bb8db08f6e6041a85cfee90cd36a5b595afbca34d52a125465454fc806b4bb7ae569eaf4c882922fb1b962b6060534e597791cd0ad23483be5981d9be85c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011d
Filesize
125KB

MD5
53436aca8627a49f4deaaa44dc9e3c05

SHA1
0bc0c675480d94ec7e8609dda6227f88c5d08d2c

SHA256
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1

SHA512
6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00013c
Filesize
33KB

MD5
2f1934ef3527bf18c35eaff90f509b77

SHA1
89e3c3e610a6986a2a102c244773e39ab2c6757d

SHA256
acada0acb443dc62902b91cb1a3aad8f8eecf0bea59a49cb16d5d44fcaadda3e

SHA512
5596a491617ea4b0b510cf01dda2596e240b41db1ca4176f16fce53a02fd765b1060ca2fce2434b3bce937df2c341f70780304172aadd69b101633c424f0c9e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00015d
Filesize
20KB

MD5
f8511587cd1eeafdd6e3f5d8b5166d2a

SHA1
4ae11041c3556bb28978f1f3fe7d4842a288ae78

SHA256
f2026022196f6715b6564abd300e934760fcd1746dfdca2885222325f67c7b81

SHA512
3c656cef81a9e022d148fbd6facf3538ba2830589faa693f54a8b3c1df2c75ed4da452503c732d1e332fdee1df54c7413f6408176db4c9e149b99bfdb7fbce08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0da2190918b768cd_0
Filesize
64KB

MD5
d1272df2d465202b18d5ca212d817a2a

SHA1
cb31ab5af37cfc4a5edc6414143a8b04aff9290d

SHA256
c7a2050959dcf549a03fe840c0a75241a3fca37a3f2a88d1d13afd5459fa776f

SHA512
9bb4bd76b9d9da06aa4c68fda1224a6846678c82e971338367cfc315804cc68db377681d0f77bb150144e83e1f95e3c70a3b73115aada5f1b26c293c48d25dca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0fba8ae2e8459879_0
Filesize
268B

MD5
49a802788e86988c9a4f175665b1753e

SHA1
f5056266f96b540886d29b132cce820426caa185

SHA256
0b75735df9266451350b627ef733ce76b564dfe9a5c8c4d94db56e4a645ea71a

SHA512
3128d3f64dd9e9ff97f5d97a5709c20e059aebb62030a2b47d2601d1ae9bf70e9d35281aec2ecf31d95231357c5c61596eda83dc062ccdba75861ca61357a469

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0fba8ae2e8459879_0
Filesize
268B

MD5
24d1f44b82c6021b829f829432a4b150

SHA1
2bae08ff8d872a7a7c68bc91a79e2f56fe1c753e

SHA256
14549231d4623cc27a6b5b0adddf82abac0b921aaf885acdb0c4b59a32b56886

SHA512
19d41875d4f262ff9884449ff8cfb08e34d731451d3524aa6fac1c041b65f36a4170c34a72a21a3d3b8996768d6d0d6d76cd14c3bc5340a4fe36bac77dec8637

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0fba8ae2e8459879_0
Filesize
316B

MD5
d9b7d644e10aaf0fd7a0c390b6139990

SHA1
015772794bac137c15f138c1f0ce32500933f336

SHA256
4f44e1d32cab766e242a911b2b87592340ca66e53377361231838a44c483fce3

SHA512
f9b1d4f26b3710415fa8ed7dfdb61ed4a4220f0f908c7a92b8a0e521f32f8becad98109564e476d324962a03f75497d501b0210b4fb78085b0ff286bcc91d75d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0fba8ae2e8459879_0
Filesize
64KB

MD5
4c90db4961373d43f1bc4bb3b8c2d090

SHA1
fb34e53ac3dc771d135e3d3d41c3cd6a470951f1

SHA256
bc86527722aba3e4f65f53443ebe17d57f9414475376bd1091b7161527c984ce

SHA512
2022a6ae8d91a3a953a4f8fec7c753c6bc654c8d63aeb0686aa4f7c10492b1ff196aaf1ab711856910ff9f281dcd3b021a47e3367cc54a9b608adff3045ff782

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37c8124500074501_0
Filesize
249B

MD5
8f660b569f6247640d8bf208c72fcfb1

SHA1
9423525e63d6708be86c4b3946332e780e7beae0

SHA256
7b1e299d930258c51db913e825120289f8b5534f394d690cee557ed2b9365171

SHA512
a729d6a2225a56ba45777503a2ce5e2ddf502f175f726a6ed78036b9d1391df56c8fbae35b3f865f21992d22e3b4b3349cf0180884ddcf16190bdc2116e5f111

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37c8124500074501_0
Filesize
53KB

MD5
219e2272274322ed2e7d6523ddb79a8d

SHA1
ef9fbc1e82ace6456fd9b83ec679e069d6dc8fc1

SHA256
766e96ff67b111f356db4bceed80761ad3678c22d915f124df1c02e2d7a7666f

SHA512
841e47875c884fb3efd2e10370a4e580a6d29395c0182bf10ad071997c789d5347ea176c5a993d08db264939176c0198db8402a51fe5eda29db1927b4be815a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6b6ee70b4670556d_0
Filesize
33KB

MD5
357e4559a1af888373252e5295298c6a

SHA1
7dd731dbb53a80273dc10e7b5ea4077bbf543ec1

SHA256
d15af890c10940d84a0aa1da66ccfeab7b7c3be1ab07869988161432931d7ac0

SHA512
4ba3cfd19186114cd94aa7df34687b42112d24b4950a151284ef2c7d9ab2b0594538332521f5d315fb96e1daf6aa1e1f672a7e062581c4c00176b140da7cb819

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6fb777029fe4bf3c_0
Filesize
12KB

MD5
9eb119d5dce18e8b932f8446988cc373

SHA1
823cd8014052280246eac61a38ee7f824b86f2e3

SHA256
a22db43d5fac1c6334bfc742839da8f037a131aeda80e55d7f910443ab2a264f

SHA512
c8b02240a2edef70d935792792169ee10f9c8fa9d649e5c079b18eb27665479caef060614c14fdc908cab23111e0df26deff371c069e3fceb7ec746f5dbd25b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\95297b7bbb6d94e5_0
Filesize
53KB

MD5
42a5eb5d4ef9991b8369c2e52d4ee00f

SHA1
330e406c289c9389283f89cbb027758c447ea049

SHA256
5d64f0dc83adbfd46c50c7006011ce2da37ea396324e47e6404124ba86e6cc41

SHA512
ca000d0c0f179eaa1fc8b34a9564107072069af0a5919f2b5f236e280e640de6a002bfb4a3e06bbbcb8316b7dca9fc45a9766eb8519f0b7b6d5f59dc4d8b37b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d39eccf5713a191d_0
Filesize
3KB

MD5
2f5c26466089bca936cab0f5968a7b76

SHA1
5ad786d5de8e461083bb88b71ccfa16c1fcdb9e0

SHA256
9fec40f1438b7ac51c0235c9f25bba1221807611158ba1bbc268e1473fd4ebe0

SHA512
53ea4494daff8b65c5585e0d93ab712ba9f1c887f1057e3bb1498e9615537b5c4116cfcd524d675c5189de6b1c6be3b4a3024674b3ceca4b3da0228dcdad377b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Filesize
11KB

MD5
3d73fe63e38f93167dda6fdfb99e9791

SHA1
dca21cf2eae38293253386e465807ff036ca2e7b

SHA256
4b83bb46e29dd75cd41956e0539460679176f1eb2b2cc15f26b21aeff7a6e6b6

SHA512
97e5959064faa73bad4ca7656a67e807895a85d079411d8d5576c204b55cf13e030a0f44fb53b6d9180aa5f93be384c5fc87beb892af512fcc1a91701b6f019a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
8KB

MD5
4b33be55179db9be80c6539c0351f7d7

SHA1
368f64a27f6fc7197da457532bf29c30adf7d8fe

SHA256
378b0f6923a0a3748f8af5d5e326ee2627ff9ce406733d9cd7e91209f61228b9

SHA512
6410fc63434a19f4af3a15d61b9bf97eb0185f860106fd6fa3d14813ea8546e3141461b4b525395561c2ed77cc79d45aaf222d4fe8df5aa632892a6edfb948d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
8KB

MD5
805567d9cba109231dcd4d1426b995d1

SHA1
030f2c0cc1c84b39df7efdf3f5dc3a7d5388e2b4

SHA256
166f49aff3ef03391c3144cf056f529d16da52f3c40bc1e54a32eccdbeb99a66

SHA512
11ea977089f0b10895899f70fb0160b768e2da7a38f9d3aa8b6737c037c73cfe98910df5e7b70ae2f503b3c0e0466deecd656eac544a29ed2bad182fe3ab455f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
3KB

MD5
a9289051b9eb3f0f187b487d73d547a8

SHA1
f4efa224ba1db86e39b22502883c35fdddf43ddb

SHA256
384c41b4ddfde6d5a3c5022302bb593390fd1b0156e6b073b3cb9b1a6342a65e

SHA512
8a061519165a77829d1ad8e11b190fc620baca9ea2424e327ff4dfbce79190a2ed6180d23fd5fc6a5bafda1c63a88570a8a3d8f1be9d236a0d4bb676eae8e5cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
3KB

MD5
b2686aeebc9190fa570e731a51d41470

SHA1
fec8f04f92c5b6e5c74b3d584e5aba9c5488c2d5

SHA256
146d502e6521e985de5fc2a3f68e997e501566bc7a1c221183bff1c70f4c7ff3

SHA512
82cc2c007160a776d532ea4e626406b1d31769999c12130479b852414086fdd034367131f789f6614e84f728217b6c3d9d246b6b99701f728af0607943c2eddf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
3KB

MD5
ca003d71d45d260803a846f59d47a6b2

SHA1
b1ca992ab0dec1a3cd2adf7fb1a5d6e281fa6e6f

SHA256
28c63f6383286b9d4fb9c505587d6c5a2f8b71673245c422039d5d39c445d479

SHA512
dc9857668568a4cbd947e5f8eb9c5da986409305d4be6a9e3283d9ae4336b04df742da88a1c36be495d538e1303f1336c617ef27a6fcc6a8a986b5d9962cfce9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
3KB

MD5
382189f3701445f50da8f45e37e153b2

SHA1
f82f296a1e70c8864d6151b98cfa802382b4be32

SHA256
4cd72c04e67b51a5d609aa75e111795126f8b4332d796ad00f015f0a891ae643

SHA512
f8747692a0c08cb1dd15b01c0a016fb03babd0d9b6e90ca02631e2aa5d306e931af5bd3aa7003ede7cdd2ca6a11ca1fc71d7c754f3334ea5dcec4a40e3274c40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
7KB

MD5
619699ab06e63a159ae6ab7122ccb049

SHA1
aafa5906f45693bf535c728a00d107eee7710dd9

SHA256
d716a55621de4d09d5ae44c37e343fc749c36bfe44dc24048922b21e8fe1b9b6

SHA512
be1fee689b85fa6fb285f00a89125271c0f92e61976c2e843f4a3addfb49c807e5b5dea611fbdb78ed059ac22ef935d12855b8cc10e8f1921ec68e8b277957ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
7KB

MD5
3a100e3f5a4242e8e1b69d91a3c298ca

SHA1
e20e85d838f5f60788835d77edd1e2a2c1ccf86e

SHA256
d4cbb3f42598ab5584d1e866c380078f70c67f09430ea9b0075a5c4d3a55ff4e

SHA512
ace23f1a5d9f8cc751a007ccace5d43b885a2fe7589ec596b444291fbffc8dd8f5403530b9b586b2b1d10241de5e74eff129aef497bb297ebc2c18cf93df1210

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
8KB

MD5
b8b61b69181a38226529376db8ad6733

SHA1
ace9f17d9987f4ae59d88cb63035383cec99bf37

SHA256
0c02904bc15ececfc9fa30de88309c817bb957866b5ac698269512fb8de9b78b

SHA512
84aac6fa6b446c78c1f83408472b6833bed8c67764d4be06cf53d34d8409fa593a8a0bdd5d0ebd98fb32373a30bdee615097dea783e3bc5cad22f110a05dc412

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
11KB

MD5
c8fe903ae8e1757f80be533006e75ff5

SHA1
9b7fa57b86249a94ba4c8dd88db3c03406644779

SHA256
05168f779cabcc735015737206d0c3f1e3ade377bfe6121982e437a3ca6bcfa4

SHA512
f692a37588493988a56635afe73483295e3c2d49bbea6ca850426e0e3e8dd62116866191cad6885bd71f90acdc1dafe3eba1d6f7825118d78d468a1483146df6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
10KB

MD5
32715922b6a6ac070e7b795e43b6cfb0

SHA1
2791fa6b14a4bce655871015b92b9dbb2ed2c45e

SHA256
1f46a492d5c4204320dc5115ca9de6f31ef4173c7a67eaa9ff578815dae3ec68

SHA512
37c22ae419124c6baf2eeebe6d9b8a96f6715b37eb8528f4e84c5a8aa9f9d59297e8b7cf725ab862a29529fcbe8051d6e8983f0a452ff85692281928e02b41a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
7KB

MD5
cd7276b1d7e8979ec7342846b32fb615

SHA1
1b6536a4002b032bc8ad434d258d179ebfe17d5d

SHA256
f3dc0ec6929905223ef3948153b31d23d748e2e976292eeb7f51f55ce293a752

SHA512
c54dbde8128628fcea6300c70c275f3a599f0a58274eb474e095517d42acbf1ba7a4282bce622f4a49e43a7bff8d76f95e470d772ce462f70c30782520bc0031

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
384B

MD5
e26601adc3cc0e6f58e4f0b167899490

SHA1
145faff3bf396d75a8f5eaf05b3d3de6dc44c32c

SHA256
09f06d5db65046b50a2b335f7a44857337cb0c02002df39a06c960f8ded49fb3

SHA512
fdfe852811a906158c81bfc2fa725ada893b0dd17809d304336af93beb3da136cb471b2d33842ebf8129b4d8fae82e12b89c1b8c917f5b345ebeecebd6c2d867

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_best.aliexpress.com_0.indexeddb.leveldb\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_best.aliexpress.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
17KB

MD5
754d8ea853b9b1d6d5fab84d7320f1fa

SHA1
c10ea5d22c5b364c7266a1be529f5f8af3d18453

SHA256
c041560d7ef2b665c3cc1c93b6f07405e2b7911c458ba82701c57a658c4c8954

SHA512
2cc9341a3c81ec84a5e429f5c20463b79cfbb33bce1a2c82c882f731ceec4e7c43563f95aec883bbc4ffa4cb432ff5a7130dcaff842a095580881d73754aa514

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
1KB

MD5
30747416ab26228f3e9e706f4839c789

SHA1
620c973916c65b6b8299dc8efd82d5b6c04a918d

SHA256
578d3979e3426dfd08acdd12eb6b7e95fe06feb54564e41c984371ff24804301

SHA512
4196dcad1a4a83c141ac086631f92499482e9a4c1fbf27a79ca265c22a7e78fe1fc246fc3104c6486eb0b0bebe91fd104b5f5ecd954db40aa6d198a21ca9e8bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
11KB

MD5
8d2515b8e58596f30228345a248fc0bb

SHA1
972053e2770aff254391194bec7a9b3942153aea

SHA256
516a6300bd39604f0915a98e971baf8d471dc7d1f1a044cab44d032068874fb2

SHA512
c377c139a34037961c09a108ece9b562ec0bbac1d888c7b6b91653c0d14b4746e3a77536337b36fcbe5bbe6a2f753bbae018c14ab4ed1480eba2d08da346e0ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
14KB

MD5
406851e32433c602297ea4a80be7c0f4

SHA1
d19fb4e24feb13214947195bfbdb9f6b6be88592

SHA256
b4b68b968d193f024f7bdb404d002b1fb57a061deb97b0f885a6b18af3d11781

SHA512
4a45b648173f8c4537d67f763af1d1da428dd6ba0b08aa9d9da76d3227ad240c855fa580ea623c500fa337f21a006f190f5af684532b7a9c9fbbbd5abd8c564d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
10KB

MD5
1f63c27ac45d1bb4dae0bb00afa650de

SHA1
eaea1b1897ed433c4619bef300c7c4ac51e5446d

SHA256
696f23fd4b2e6364e83bf84709c3ef4990876059046e48fedebc72e653114acc

SHA512
591bd2d97304427d02914193f060fd513c6efa6bd6ef2cbc5b816fc3200dc2613920aa40d0db607615767e285e57911f248b473d28d11f4ed1dfde4a69e812a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
19KB

MD5
1b62989b65a7c9b66343515617518bff

SHA1
b144c0174979807a32167aa68d48d030ed98d40e

SHA256
9151130f8542013b23eb3b8faad90d0f01bd4423089727a412c7090098826e7f

SHA512
02e3a84ea7f604c969a50d07e82a343619d683093477b85b1411079aa18ff3d7c02d0a32fca4e264bdc3de108e2f92ce5cb8882ff4b72fefe002c8c172ec5fa2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
d1c3aedf6fd548f9c6822327768a9bb5

SHA1
a903455c7f3906d474567e1d6cb468939ea27f05

SHA256
2bb161421213ccfc566028978431f9fdeec0ca449037be0fdd58e07fa91089aa

SHA512
ab4dc18403130dd1c5c86e0fd9c59f415fc24122f63c3ea2cfe09cfe328a03a3d7ad94acff84ddf048c2642b9c8ca9a4471cd4c0f9e88798637ebbfd98831aa3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
6a25084800a99ac3e89c7601428f434e

SHA1
d96bf34d93607fa4b3f71bbad03710aaa3b610ef

SHA256
d75ae441cea97491c6572b5cab9f59fe091600bcb3cd8d2c46111f12e10f60ae

SHA512
b376d389441c74f9b034828eb7c0c537f7f4244f6560b228a8c84a4f3cd999070155f42f17bcc3d1d4d5b7a594d7dfd28c6eec83af035639e364c9bd8f4a824d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
11KB

MD5
30249ab4980fa3b5d5074c3ee93ddfa0

SHA1
1aca68dd5c7ab77c083fbb79526b0b27da28caaf

SHA256
ddc05af855d4a562d1e6cb5da5e3d650ee8db788cc3d41bac65bef24ead3a031

SHA512
0df368f24c5ee94cf0a97434fa77a800a7ae9a900c34bda02364c7d5dc730bd7bb61a51797243c1a97d7e12f2b11210de4af8d11df4b7e18bdf57f0f5766d24a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
13KB

MD5
c99b6497562cc25853cbece8522b94c1

SHA1
67e513d3be66eade63f239929b848e751c6fb622

SHA256
eb9cdff43fdfeedc94e05d197b733cae05634facb875d6e697db2588be709dc3

SHA512
4c2c7f46cdbce66509295c06d6404762ea4a29b5cf210ffe1876a00f1d4f81b4853716f3b13166481bad66f109c3a159008405f22d010516bdf6168fcccc2cb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
14KB

MD5
a7b8e8e8479c5e76f9463827e8d66464

SHA1
9635ae737fd12ba6e92df846d8a1ea23f38e815a

SHA256
cdb40166ad0b7eff74fdccdf94f722283c21aff1ec8c58c3bd431588ef9952fa

SHA512
c489016d7ed6e82b4a25aca0de606e33f8dbe185ec8fdd432efc1132155948717de2574ae129badc420e2c76bd1ad1ae814e87504980231b346d1d4c788e3294

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
21KB

MD5
1a1f60ee051a9d2cca4a77e94982b425

SHA1
ae22f8bf8841b1e49bc13960ec7f7e6e153041bb

SHA256
7e78a0d576ac574126043a4373db3fa73ad77a6c00e0a81c8e3cda42c8bfae99

SHA512
2aa5a2eecebdc421de6dfc70bacdb18e31f715f4d75bf83c3b1377aa81372428f38bdb5fed7ab02e8c202d16f5377ba2d0ed7ad78ed2f3dfe21d9c52a118dd5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
22KB

MD5
2551c5161323dabdb38fc4d60c447703

SHA1
a1158a38f3064aa572c546602a85fb47dd96d04d

SHA256
b4e9887c8b6da236e01c0a6950fbb7ffac25d4eb06d9e98dad9cb2f27d11e02a

SHA512
3a74cc26f6e2a19a172c0e85c81ca124a554ac620885dea13b32cdbb39490b02521c57f006b84a4d4ea3fa1dc5cd4d8c59890babfdd8fb843c2f77f0303f5995

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
16KB

MD5
2411790dd90e87dfb818fcd0c82b72e4

SHA1
1b00ebdd775aaf6ab2e1585e52910303aa44c442

SHA256
398f73c4404116d34e24d22878d0b5966f2faae3535fce2cf99217ffdd759085

SHA512
f95d73170cece83f3907f194f52fde8d983c23501e9dc503c2c6d35ab2b0907495b976606faaa3d04aeddd4257d92d755d35f8897752074f366bb71ccd1dfd3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
16KB

MD5
10d8d87925b65285e7184452c4162a69

SHA1
bc257e8120327cd160f03a4d182e3e739fcde611

SHA256
4dc1cca0a0d280c41bcc751a39dd8d18dbe5908a9f2954845f42ff02022f8dc0

SHA512
b0bb44587ac7c483346f4b5d27e46c2f8d96bb69459a989f8d04bbacd89e140e25f8e914f32bd0275f4e2d7b2a39843245341895899a411118a05917b82b5f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
8e673e3a72e0cdff0a129f82016afb5b

SHA1
7e271d9546ce95c02dc241d4a8d372fb8fbffcef

SHA256
3f6716f9c89e90f22442939b5c45d2b2fbd8588b67b2baadf156afbcb088bf8d

SHA512
c98602499950fe37ef3a8cf38e760c03d2b9c4e9770c9db26e9e0820505462e056c902aa25bbdc2652ccf5c4ff75cd2535ba674767b390af94e11d7d46c6efdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
8b5ee3b2eab8f668549312950f4b2f13

SHA1
64d99b8d00d3068b06a40a37167a0db17689012a

SHA256
6beb8fb909db8c99ca98fcc698e537236afccef6bb7756a705d9681769b1cbcd

SHA512
72ec9c4c1dcaafd3ad4a5a269a95a9dc4e3507dcd9bb79e630d322af4a6acdf478f6a9d0d09c78d424b9739591bb800d56f14e134111f088c93c4b69c0993371

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
14KB

MD5
3334bd7b75a867c206bb6bd99b6bb05d

SHA1
aeaba2bb79131bfa41c0993b50e57f7c8a1a450d

SHA256
abdb015c0fefa7c3786c29fca11ae403a9eed7b0bcdbd7c869c69b5f4b4f2138

SHA512
288267c554b7005cbc123fe1a508964f14de8d76510c61a198082049a5f375d8e8d97da3ff9f9bb07309269e23dbeb68b245fe5c019174b81a460ad7859ccaa8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
71b592c13a57af8915cfeefcc6097c44

SHA1
ca861be24125e73aa1e184dde4b7c36513883d12

SHA256
7a57998df4af998e315f631f4751cca0ba54a856a5217de063a2c9cbf88c2072

SHA512
b05e76ba87828743a4310aeedda2bb898dba5e05e6f5878ed2d291686b79d95baeb75413cdc2a529d3d2d1a2a4c8a80eacd2af3d947e4007b37b06ed5d2f4e5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
16KB

MD5
4e0d5da45f4aa163be988bdbc8b71d9b

SHA1
af1ef3c9f24683513b8e0933ddbd539cd3090998

SHA256
656ab60fb4af05020dc6612518ffe3bfb0ac83aa205cf3ed81de7a9a0ca65f8f

SHA512
0662d4ec2fdd6325b827b340dfd9287299121ad5966030e757043f83bff4ecdb9aa8221afaad08462a3a7722441069f6870cadc4586b894c7c639e9d05189f13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
0d7f67b58c9749f02777e871f5eb2db3

SHA1
bf3f0311f3e36a39b3a39c07114d7ba79b2ef174

SHA256
cbcfc3b707f0c52d34198d29a5fe05a203b2e5b12043156996b8587bf350072b

SHA512
37b69d3d9669bbb489596697768c89dd85ed87fa17c5adaefc99c8d310559256c2f6c5f1262714f2ef750fe47e275bacc08490fb389fbaaf0e70d4fba6d69251

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
16KB

MD5
818998129446338108f664d6e0944687

SHA1
a2a59ca393aa9dc410de19af704200529589c386

SHA256
2eeb2674acb65e587c2c59941cfb1d6d02304e1477e5d7c60d4628b27a47f40d

SHA512
cf66ca65fa65280ad2a9210bf8147fdf0009fee749d6b372a5653a0b820c1bc73d838ccb8cd9f5fddc723127ed8e92271a0ffef889900d75b486a7d73ebb9d29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize
264B

MD5
ed16bdcadac5b242d3505744d9c16c71

SHA1
eb2a111dfbaef14ba024e67aaefe961a02e93f1e

SHA256
795521e30cd7013f5de18c1a88cbd2ef40c4c2aeede4214eef8de43b4f2b96dd

SHA512
009c0098cd12f72e0bceebed2bf6cd37000bb5b40da933a55183f0e40562ef37f88547099cd06fee567ae3e337f2407dc590d732758c8a3a5bd52807a2dba450

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize
240B

MD5
bacefdb37c227cc7f0170402d4fde5fc

SHA1
84b43789edfd04308e5ed157f1e787cdb246ada1

SHA256
82750b7e48824435cd381e4ae6c12d206263e32650ec977326ad8e8a20b2cc82

SHA512
c2b040a9f25d677086b6ec8b78e082f348eacd90293bf756f025603d28fefcd5e1299d8d001552ddc693b112ffd56b9eaf78278a38938bb954aab9a4e75f3761

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b4766.TMP
Filesize
48B

MD5
005812b44e0846b1246900258581c393

SHA1
42ff85082e959c70886e59f99ebaceaa5ffb1b0f

SHA256
346676fac9c5e7c31a3ce204499d3d76c4950c215fe086b25468904fcb9605df

SHA512
5a48521e35060733609af6b8b21f1b3d6864210bf5d822b0f51ee9e6e7cd13eb8b606802d59fc66dda32ba4884a88a6b46e4234b21e374f0a626ae21679c25b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
4e58fd8bd35fe03b3d58041503fadcab

SHA1
018e040b7d8c31267af52f49ffdd3a6fd40af7aa

SHA256
27a44a15b6785a43002d4adbe7a24a934bf4bd5719e820628365383ea904acfd

SHA512
29289b9e50bdf07fed433097b322215cf41cb23cd775725c4f03713ab6b781109f276cc1dd14865a0db6af5f7d27808f04f460f54909c6da631fcfa55e2b20a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
ebef7dfffb796cd4a77e319975685766

SHA1
84a3fd06414f3206894b71865c062a8b9d10c9d8

SHA256
6729fddac71cf3519cd8fe182de93f6c59a9a65bb4c1066c3c73b91174de6e0b

SHA512
31db0c4c07f0d1628bff9644825fefa2e8b937f76034a5ebd887321804ee246f80bed4c5eac2de106d03e8a5bc8452113a834a746d3650de72ff5b79c9ed1288

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
b8a152a2013c0c8dcf269e9a1664d317

SHA1
50382219e40e1ac19cc3c2c9872fca8d8f251975

SHA256
da3f5c10309f81aae15d3e0cc13be7230e6e2c650a1988ced8c6a43dba19c3da

SHA512
998539b44cf9275bb649713af4ba69247cf7d50d7486fcac5f04a91128924a77bb3949a86201e3a8c037fb05526588ae0f1dae6156d528219b18c5e67b9c3a4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
8721e03ae1710d4dda45d4648f2e0a9c

SHA1
03cd14f5c431a71cc8dd4f350dd21802e58ff134

SHA256
284715264b85bda586a237a51543392b186661eb50be08b3870889b716214791

SHA512
cbc0c47ab25083668b1f5bfd11498722702664f8ce4715fcfcd8e8f54df334ecb37ba32d16b319d1f9e3f4ef8a280081f74c39809a0ba5075c40d52f7cd70317

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
c8250fcbe9d3c16236229528f49c5997

SHA1
8927f97e0eabb5a92ceff686e197fbb498f52e09

SHA256
f7dfc922bef12db62244f3514ab6c29f17dd3771f22e79ab9cc592bc3daad8db

SHA512
2ace112313427bc1a2f3ef95e1280b509280ca189023a64e2b596c2185170adf4f9941a511e7870b497eca6685269576319536b897486fd099ffead69616f2fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
bf008220b5f62890cf28df217ce006a7

SHA1
b07df8fbc089c85d82294aa6ebdd8601c8f76a21

SHA256
bae5ee5d9df6ad666a261c13b83152856150ac7310b87d95eb7fa590277e1cef

SHA512
b9561ef209098bc4342b47f872bb54514872d435b90d728277f3c2ea5ec24154230decba084e74e2f820876fad7a88e68c2864c32baa0ee2eaa4561bb7f370f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
6KB

MD5
2f1e0583e41dcba01df4d8db94c2e8a2

SHA1
855cda5e28925ff11132e3c68d5ac9f430b0f65f

SHA256
47125ac624fa4dd5cec2ee3d6d890a1feb6bfdd12c377d313d2e10fb38066c06

SHA512
fecf6781dc363c64e9a7c7a79f685ee3f9afbf9be77e79767b8bd3825ea514813a3f1924bdb77a5678ffa920aee6eb33eae83d9d504b90cf706f03bb5c9b1e4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
7KB

MD5
ffeaf09547b2ab75b036fecd828c238e

SHA1
80319ca34836bb091df21f4fe3645f464bc143a9

SHA256
ef68ab0a20a6f60afb660eb9580a526fa182acf37e35f660e894c550a5ae93e2

SHA512
67beb194ff6bc80740ceedb8eaa165ea55c0da9b87ed00695e757fca5ffeedea5c023c1573b27de1baad847c8727999432aec1bbbe4c2f2faeba38249d9b8ce0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
1e737c89236a3c7391c1ad1036c1933b

SHA1
e72f7d1fad76b5d4e35bf9a0046e505b9538028c

SHA256
6430c8381d50f714b4dddb58d2bab3fb52aefe71b37d900464f65c6557d0dbc0

SHA512
4c68f980d108035ab526a57450f9884ca595a0729997f4597efbce69a728fdfd16a707574b8fa32e8a03fbf6cbf44839607b2ba188a6abbc2ad97fe76729c616

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
10KB

MD5
db1528265324bfab09b8d86e1fe22840

SHA1
4285a09cb516ac6bad78c11d35f91652d85fb020

SHA256
6026eb297a019844452573496c472a7e7002ab6fcd7f38e813200df26d41473f

SHA512
0acf2c5ff5011eb6e24e9ed42be6dda2daface7d4bb7df5b2e4e28241505ae306f7a9650c93fd6cec0dc44ea223e499b269b300eb5db02bec2afe1efadad1b10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
a9c6a550efc54d9959a479250d8254ab

SHA1
ab781f41f1fb2cd5dbba767f5fcc424b0fe79a6f

SHA256
f2990201ae7d559564db6107daba3a4ae4c80a6f6b074efff3b22ee2e9343340

SHA512
3c5b3d48a6e8e2400c3d4af4daef2852a358ce96107351a1bf5f28a91c5a818392fd5ea0e979c75dd9d9b127015fbeac1650d2d3545d82b5bb508e8ff3394301

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
c53dcfa2e1d4f5da81c117907c69cdcd

SHA1
3873b50b9d3e04cde18197710aaba51f26ac12b2

SHA256
d7f1c8dfe1b1d02673d1c0bcf57860cb549283ed969e2d32ef59897ff08e878c

SHA512
c524ff2505845e3c14f25dab50cd8c289cc5588a562a856ed69d5de5407215376a8364696bed42ca0fdfbd169c7bae352c2dfa10050f609b5d5be6cf1e9c1643

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
64ed6df9b1584aa81592d2908b0e7ff8

SHA1
15235cc73dfb6508d2a06a5d4dcc424417e77291

SHA256
7f70370072b0c57fd94acad079bce76ca778078b4b006e32560aaf8917cdcc91

SHA512
7284d85114328ce753c09ccce29861383a8c143cf73db98631a18febabcbc8fe22c49dd1f11df17db55af1951eaa8d6d3f24f4cf1019d260b7954962c2282886

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
2ec7eecb62d1e27fef62a3788554d5b1

SHA1
126115ed417c966a29aaa91fa75a9263e49a60ab

SHA256
b7217f4dba4cbf707b251e8ee69f91a14f50f4dc8681d698a3ea6c9d97e5be3f

SHA512
582a43ec2070651d1e7c61dd228df208348e65b487be969b7c11914bb1f0c9ebac24022d0130e6ae16683083e0907338070337e3d3ca636502af030313d9fa6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
532B

MD5
13c5bdd87b19bec67dfe3016b449cbb3

SHA1
b9d39aaa2ec2f027956bce2b96f946d9b535be8f

SHA256
2498b85a393d760cdb27dc6d2441d85996399220ca62740847b8426ff1b106e4

SHA512
6f9bc33b9a6499d3678b9b2d805df6c63719926547501ef52e1fdf3be46c3f3d95ebd7509413d1ee68cb3bb23ad7a02f55c5088501e8031ffe0ab1ab6c7abd85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
cb5ca3ac5685aabf8b49531dba9fd60c

SHA1
40c4e90fbdac621f052e1969a3a4bf122bde3188

SHA256
a3dc24f6f340fcac877a4818b99c79f2ae544dcddf97945864b6798327c191ab

SHA512
6ad750221bcc3385d80a9ca7f8ae1187a26b3868183094f04998698a44bb21a7ac34520582b8cc200aeac11a4c640b8c05752166cf6a79b373822035a56b181a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
10KB

MD5
4fbd3f58d0219dcc576a2702c855f63c

SHA1
2c059fe44db456a5fa465d9c1262187a9115ee39

SHA256
c28e7488042df5d0a2e3ee9c7be9d81c221151f71b16da4f3b3ed9f9d5e72a29

SHA512
056f8588c4ea47acd49dfd56656bff24563fc7f656c86ad6975abdb781980c7265452054a53c10bdca8c0a2f1e610c1389b86242f7d0ea0de16ba5c9794e73ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
700B

MD5
7f8d4dc176cc3d934d0cfc680f65437d

SHA1
156c3a619a699a9d1165e6173b081cb20c715e8d

SHA256
58c27c2c60a181e2238ba8fb7cb42fcca5aba7856a1fd87b1281157dac278c45

SHA512
5676d0cc236fa085cb55d8e8788b42c94fbd40613e2b039acb35d85f89f1eee175007e25ff58f71a30917cd906688a69f00ba9775935d7fe4a724bceb610a042

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5797ac.TMP
Filesize
532B

MD5
0be75f383b12e921f50ea28d161872f0

SHA1
d9919041d54460c9db879db744bb23256c7680b4

SHA256
41710ca317305de0717594b0409198bcf5616f8a492a239a340def77de87c985

SHA512
9831b9bef3ee6114d986bd3cce0e7caf89142dda24f3cadc752b535881cd6f1b8458b4d364385e1980fce73101e4b0eff42fb7abd5c3daa34356e9b8d5e53672

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c046fed3-e9cc-4fb8-b08a-cd6da0708d48.tmp
Filesize
3KB

MD5
9bcac47477e1f46076f3b016c3e054e1

SHA1
cf1306aabaad0187bda3fe460771c494d023049d

SHA256
453d74cac43b0799cbbfeb12fa82f7151a0132a274c133bb58359f3e5ab7656a

SHA512
9ddb732748ded5f1da63f351e5720c2ecb2377f6e0a284609092a86d08908acd95d8f03c149a7d98fb16ec38192cc254b8c98dbea1e0b3bd8571ba6d6c9122d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dd1be6b9-70eb-4c31-8a05-deb344ca3b69.tmp
Filesize
6KB

MD5
f8405463948345e23d7d6e9a22467b54

SHA1
a0e792f6809321f3496e35f3013b35809c88f61e

SHA256
52917d7bb246a061c330d3794b022206ceec0ad8402fb3751a08fb3201a4ed86

SHA512
4dfd92f54d3f404c5d22fdc29276304df5a1e2c4b25b7ac482bc0347bb119ea208fa9c5cdf1ca9352a2830632a40c2e2e018976cc0a5642ccb4babb7969f4de2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f6d279ca-53da-44e5-85d7-15f8a19c5ef0.tmp
Filesize
18KB

MD5
624a6f2ab82e3aaf58fa2d4fc6f52b8d

SHA1
02a8fd19e84f8ef47f510110c86f88042192e06d

SHA256
f44294e2321359899e6fcbd7c7d6c09187acce84b6f8295f77ab062180702a06

SHA512
b46ea078fe6265d5894e56b7900910a596fd36563a057b57ac0974450d2af3bd1e4557f0b79856d399c2ac09d0979ae9c384feb84e892ce1e4290d8c54a63b6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
c50c053cafdcd1077311b0fb2050fe47

SHA1
608323ae81716752864b1a1e863f4ec342fc1ef2

SHA256
d01910e7e61d0772cbcde8032ca49690bd8dc2cd3fc2983925990a94da29f903

SHA512
7eb6adddb48796430fcb26f01c32cc64d1a158c8fe322a8380c8cb011aee6fde2388158e5b451e57644d2414b11ecabff7fb860d7077f7c2651cc34e2d616390

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
5208cd59fd6ce07ae7761017dd92d3a1

SHA1
dace13734a45152bed7cb2b51fc383ae36cccf84

SHA256
4f534792d4264845b9e9dbce77683b82ea11112ef988e4c93e5401710593a9d1

SHA512
6c3bfb6f67f76ec676ae593eb34ffa4fab18137653fcedc948a534aee9b2840b7f0af9a2900722d2993a8c159612e326751806692c4ae37efff8f87d99d6afe0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
6140d194ee925c8e322019118c853894

SHA1
cb693c612fc9aef90a0c1b669f41dc1850720e76

SHA256
6cc61f817512344eb2a92779b24f5c7bbf6b6902883f5a35e318e1192ac9e198

SHA512
4883662bcae932d4f2cbebf7fd5049bf3ec2b25995afd1c1cde5c2b562f9f004284a81bc26b4a8c182299fe6ac9df9653cf8bf35de7417e48a5c7ea8a8e2aed2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
188b34519449a0b4d239a28c32677dae

SHA1
84e10a733eb9fd690825f94bbe89f0f880f7db06

SHA256
de25ec1b4f9ee9d500804aeee589e82e6877bbf86b59f748859801017a31e73a

SHA512
32e3af033b9b690ca7c026b08be415cf7e740948b64e8514cfbd6d88d2f7c1186ece11faeed4a575f83432967199922e90ac423d1775dd00bbda924a90c9ae72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
69ec58ff463741fa6050f8d387856d42

SHA1
359e7af0726c412feea9eef25d7f33777d828c6f

SHA256
7895116fb9f62b861d0852b99c4ce54cd61c4fddde6229cc790853c6ff93d2f7

SHA512
05b400fe450c6c5f8c32c0a2c57255be8e6c6f63b42f58d4beb221b9df9e4824544d0911383a1cc9e98a5aee07367fab72206b886603fb0a912c3017334763d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
2b07b21fb5369e09ce5e950ee672335a

SHA1
3ccac9887dbccadd58a03502c0a650c2c32c4585

SHA256
fb0c5d868e65402eaea6d5f970fc7b21cf5230755b50d09867f21d6e54401003

SHA512
5d50f487023882fb2520405fd277d539d09800b4bd1f37059b4a984d420f57033c7bf7954c578d37a94519a2824dcecdcfa7bc0deef0c9b3c100dd885904d956

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
14KB

MD5
9a1fffb13a53c029feeb997c29f27dd0

SHA1
2e317bb593e4b52a667f3b9e15664cf2cd059bd5

SHA256
7047a1e24d22d48638f3826be7af32a8bdcbcb855ae52a3accfb6685ebd6b219

SHA512
fe420295009f64baf9a14f1bcb1e0a1841a35b97891df7bf2e50ad35b9aa76861cef3d84a112d0a7ec773fdcbb55bf04df7c75e805dea3e8dcd23b64fa13cdf4

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
146482dcddc34c134881020787e7a074

SHA1
e34a91410746865d07345be3f805da6339a7c790

SHA256
9ab11cb010f8a0a6e1a40f36371882cce9f162bac7cf0d9e5b6a1ee6a7583f66

SHA512
a0147cf2301b9a2d7fd0638d0b06118698f7252ca0b671c6650748a8dafba48b2c47c332056521038f6e1849a0df17bf49f44cd5428fdf8c003ce28a93f60343

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
61fe6fa0aea1fd54496a173f1f7e8bb9

SHA1
2254efbb017d30d8b37baa8354f203a0517797a4

SHA256
55bbabec63f907ab10615fd5078337489b43750ab4327fdb4c72d5c6748dadf8

SHA512
7f0edb96e91bf6775e06a8ce32eb0babada0ae4c58353afa0d87965c9ef7b9bed9b09d6d5c8cf6c59e175b45a575bb0e5bcb3933a712e4ebcb70f0e073b1e456

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
14KB

MD5
97828e14bdf87be83e9f431b4d8841de

SHA1
6b881bf0094be22fbdb811908c754f32051e2e6c

SHA256
3b72094b5676a6dd8447614da50ea9c3414812e26451dbb7f4bfdde466f7d617

SHA512
8d485e1a8445e6b46d1e1653f2357c2cd1c5f096309be9f89cd19d76a1797ff82899242c2a0224b095c94b8dc3a2d673713da13617d197df218d52b3f8ef5d71

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
a22e37c0e586fe94cccc29d8e6adefab

SHA1
5b156cf08124d28abc7436a0cda76b26c6e96c76

SHA256
6a588b46a0d111d9142d1daa773ae1178be1ef06153cbe93f5ada286657b1d3b

SHA512
09af5e9d4b30045126e1f14beda31a53004e96f1526edbef4f0ee358dc485f140109f1c51f905b946f569e8604efd7f5dd0358be4aa968928bbec0e2816262cc

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
206c7f1006e4570613b5c69e776e3b41

SHA1
072bb7bf17302836e7a4cec7bc1f84210c9c7da7

SHA256
dc6b1bc3c735f601e35f1c4246c98b9f5b851ff2fbb12ea3d5aa702a18a3703a

SHA512
f1f7b0d92d19ff47c9e83cf8313e18a493e923f70c46daa4197628624d9cfc6551a14ad331c61e82400ef2ffa0fd18777e8d85e548514034d959b2e3e462d240

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
dcff2f560dc7c23b9bf393e09a975502

SHA1
028c16354125805cd96bbeec9de61640efc69824

SHA256
ef3595dbf3d658feec1621d38f2f4b971babe240fab9b09591ca76f5ea210159

SHA512
8b49cf470e2443d223146d2277e86937f7c08ed082ddd2136ba20b4db945fec602aa5ac72340369b2358dd498196777b2dbd241ee562d8b97a6136aa348ef30e

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
eb55abcca5a1d53bc40a98fe7d002f41

SHA1
6050e914168544d6385ca2f0eeb3841e14795ca9

SHA256
ca701f2697d879f2298089e0afb8fa5545f223de086d2196fda50cd97f0b4c37

SHA512
47eb7909ba0b48243d46270ab19c260b5971ed0f8697b7a6e0e4054be2742d554245993f9ab1d4626135aab05520ec5a139518a28c3765310fc9c09d3508266d

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
a20458133217194236c3cfe43492de51

SHA1
9720b8e921bb5e3620c1815a85b5476727675dab

SHA256
ddc348387b5cb40b2a5ca7f92438818e808e97337a8345a1d4268bc2de252425

SHA512
168bbb757be82461c785766d738a86cb600d59a3c371cc26a3582a93668b5217c4c0f8782c3d20e7226a7f64754bcd6d81b470d533141755c593f0ea28283f79

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
14KB

MD5
0490fbf55ef0d55c37a3e387956b5c03

SHA1
6cb26563077692bccf50f97f39d187adf58b0902

SHA256
740d33fd1a78881656edbff5187860dc5484bf922e37f08832d97594f625baae

SHA512
aefe2f43fa59bdeb876a9c288d2948933d8a6e7758537482528e5be23de1a2dd252201438407690f8bebb77585b32885ad799726554b64b5c2a94126458265f8

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
10KB

MD5
735cffd699662f67e4205ee9f54957cb

SHA1
092e9c599ac586927cc282b474e9db89642d7f60

SHA256
8b0d00b206702a8d52b346d47dd9d2ed2120aae0a5afa461a426b63f52f88c45

SHA512
bc4a7b46b5317a996f3135bf2bc82a0f44d0c87119646516cd8bd41b24621ab0bb3d76af1253226400234746b8a082240d25c78df667686e684674d3b6a743f1

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
14KB

MD5
70f5223b87ade3e3346a846aad75d233

SHA1
14ae5737cc33fb6b1c65c92d87e9ab4f2fff7524

SHA256
3e481bbbf6cb38e3887f89e3d59164c9a8fb11eef220602d3ce454e91dbbb423

SHA512
8dcdb2ea9d9bc0a31e2313b2490ed5a3c096df5972cfaebc8ac5836fc89306653e6be2dd86cfce2830a34ca7575ae5b0400fcc43624af8ec0d489e7f8d5797b2

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Language\WinRar.exe
Filesize
3.2MB

MD5
b66dec691784f00061bc43e62030c343

SHA1
779d947d41efafc2995878e56e213411de8fb4cf

SHA256
26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370

SHA512
6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Password for archive 2024.crswap
Filesize
178.7MB

MD5
483c78697433d273fe559708effbe3df

SHA1
89b044bf2a6a57bc93daea55d871db1dd99d0bd5

SHA256
c79c4e7f57bfa69dac2bdaf6b074f39b68cffc801e361b5564295b393f7c9374

SHA512
e78cb2b136fae43d5810d410984940e6bb6edf9405b22f1c4c6271d7de15e77056828ef01294201db99edce3728bb0a0dcea3e4a9cf4ff5605459b5122eaf135

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\Locals\he.pak.crswap
Filesize
124KB

MD5
209974550cc2a835f1879995851b424a

SHA1
f09850b9e7fffce197e362b9562cd0ff1c5c71ed

SHA256
ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071

SHA512
4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\Locals\hi.pak.crswap
Filesize
206KB

MD5
fa034eb13d21ce4e9fc2d3eafdf40cd2

SHA1
0992d91706d26b6cc2ff64d899308ba4e9380a35

SHA256
1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699

SHA512
4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\Locals\hr.pak.crswap
Filesize
99KB

MD5
624bce9b02382312f4588d3147b738a3

SHA1
8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9

SHA256
64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29

SHA512
e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\Locals\hu.pak.crswap
Filesize
106KB

MD5
ca8a821ff5a6b848c5a170ff9a97bb39

SHA1
a98b91fa29848013cef021ec8b3a29979cac0c65

SHA256
fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478

SHA512
e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\Locals\x64\SQLite.Interop.dll
Filesize
1.7MB

MD5
56a504a34d2cfbfc7eaa2b68e34af8ad

SHA1
426b48b0f3b691e3bb29f465aed9b936f29fc8cc

SHA256
9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961

SHA512
170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\Locals\x86\BouncyCastle.Crypto.dll
Filesize
3.2MB

MD5
0cf454b6ed4d9e46bc40306421e4b800

SHA1
9611aa929d35cbd86b87e40b628f60d5177d2411

SHA256
e51721dc0647f4838b1abc592bd95fd8cb924716e8a64f83d4b947821fa1fa42

SHA512
85262f1bc67a89911640f59a759b476b30ca644bd1a1d9cd3213cc8aae16d7cc6ea689815f19b146db1d26f7a75772ceb48e71e27940e3686a83eb2cf7e46048

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\opengl64.dll.crswap
Filesize
145.8MB

MD5
71466589eb444bbf272c0f5c920c57f0

SHA1
4fcace49ee032779d3bf7b8e03c6a9f29ed871ba

SHA256
e7d625cf255360b0ea96a52ca990be6f1cef522ff7440393e45b12793ac88031

SHA512
eff62450cf03d72af2594d750a70b008226fa2e46216661716287639bf5e1ff1303076fdaf4f062ca4098ef10a8e29502de55ecb3a6e04753aad7fcad01e3352

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Resource\resources.pak.crswap
Filesize
4.9MB

MD5
df15387bf046715cc592a690da33e4b1

SHA1
ad93b08dff82cbd894f6a0a9733c70d7e564113d

SHA256
11d0f55c105883d203137a87a610ba793299dc4774fd6d8b3a86666a2c337041

SHA512
71244553d7b1b559fcaaa059622c340d22148bd5324fa3f6730d37322025dbfe5e853948b49b91db6022a25bca4ddbab8fe6ee1522a461963dfba04a7c93d69a

Download Submit
C:\Users\Admin\Desktop\start11 crack test\Sеtup.exe.crswap
Filesize
342.8MB

MD5
70637e73d294773f697d2fa26d5b8af2

SHA1
1b2113eea7f5c035d11de1c336ec4ee33d5e028e

SHA256
dab6e6f5a2736339eef1d7cf73d775b4d6fd260bb87be411e3b427b0fe1747aa

SHA512
e764a86c6295dbaf6eeb548e885f20557585cfede7c7727ca3072f1bd538fd4b5852878d8d6795d241f1337b1fd2b2c4efb74969b401a086a0c9c27f56b8a439

Download Submit
C:\Users\Admin\Desktop\start11 crack test\bentonite.cfg
Filesize
963KB

MD5
e7c43dc3ec4360374043b872f934ec9e

SHA1
6514933e53c6eb9594786a773f75595b0eafeaf7

SHA256
658ac17f4047ccc594edfd7c038701fe2c72ec2edf4aefe6f3c2dd28ab3dd471

SHA512
43b8cb4cacf8bc1e26f7c6af4e58d877287057975b3e28c52d4a3afa478b447a921fbde729ef24be9eb3858c00968455a6873a67e409a6a3fe6a35703470bd6b

Download Submit
C:\Users\Admin\Downloads\FTUApps.com-Stardock-Start-v2.0.6.4-Multilingual-Pre-Activated-RePack.torrent
Filesize
2KB

MD5
2793f0ff8fb9a4fb77086a0e8e6a53d5

SHA1
96b47cd490663fe5292fbeb8c6be7ee8ad153b21

SHA256
c131c7e9f18bab00d94e4438cc0de1822f4792faf1cfd1a17ef8be88c234fd62

SHA512
d961cbdddfefec66debfcce91a915ae7506cdcac1cd45dcee4567d061328036dcab26eb3c93801d3f1b98a4c54266f08085879120c224c9273a0b178c30e2c3a

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 608100.crdownload
Filesize
13.1MB

MD5
3925de175f5234a41273ebc2ab78b4e1

SHA1
4e1596eeb03f2566e08b63dc3be223049901bc36

SHA256
1fa92a63a95bff4d4aebe69a3d059db537e45c82ab7213b0a5c8f428a3888af0

SHA512
53f5efbb3a979a317bda22483771d927b0d62919c8f2a0d7bed5800f7cb742eb9bb7411c01558c1485cf62a2265a0196d9098c2796612228ce3cb305f993c894

Download Submit
C:\Users\Admin\Downloads\[FRЕЕ]-app_mаnual_install_v14.222_3450.zip
Filesize
19.5MB

MD5
c2bbbce4e0366636d2dc2ed426347546

SHA1
539f62b2532544b0655ab09368a699a13016a3dd

SHA256
bfd6429e44c2440dcbcffeca1f4973b3e5d83e70f325418a2a9578ce544e7539

SHA512
a90991a63db5b52326f7d8c0c4db06553c96e596ce2b00c993ea19624f961e04e7fe3085c975ba86d7d96ffe8581f531fa9560c8bba382d702b758ef3f2c311d

Download Submit
\??\pipe\LOCAL\crashpad_3956_OEHENTFHVJWGRNPY
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/632-2322-0x00000000004E0000-0x00000000004E1000-memory.dmp

Filesize
4KB

Download
memory/632-2323-0x00000000004F0000-0x00000000004F1000-memory.dmp

Filesize
4KB

Download
memory/1344-5474-0x0000000000800000-0x0000000000801000-memory.dmp

Filesize
4KB

Download
memory/1344-5473-0x00000000005F0000-0x00000000005F1000-memory.dmp

Filesize
4KB

Download
memory/5260-4071-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4072-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4064-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4073-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4070-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4069-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4074-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4075-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4065-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5260-4063-0x00000176F5320000-0x00000176F5321000-memory.dmp

Filesize
4KB

Download
memory/5676-2254-0x00000000009C0000-0x00000000019C0000-memory.dmp

Filesize
16.0MB

Download
memory/5676-2253-0x0000000000970000-0x0000000000971000-memory.dmp

Filesize
4KB

Download
memory/5676-2252-0x0000000000960000-0x0000000000961000-memory.dmp

Filesize
4KB

Download