9a855783b97889c8790c1e90b99769f864b306175ca15b2e8044c323518a0ba1

Analysis

max time kernel
146s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
15/09/2024, 05:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e1d12cfcaf796d8b16ea0199f3a4fa97_JaffaCakes118.html
Size

24KB
MD5

e1d12cfcaf796d8b16ea0199f3a4fa97
SHA1

8f5ca9c407b1661720196549dea441099a33c979
SHA256

9a855783b97889c8790c1e90b99769f864b306175ca15b2e8044c323518a0ba1
SHA512

a334fed8fe9399cdfba3fa68c3ee344d52dc866203a5220f786d2b350fbf077fa44f3a8cde4e882d7574abdd1c9d66326ae2a6138431b28285fc69dd195611d4
SSDEEP

384:SSqQOnm2LaUofoCrhfffcDzv6pvz6NYclY9VfSjVwffSbz4N/gLSA0fTA/9E2Qcz:SYpBKLyv6nixFyivWsi

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4504	msedge.exe
4504	msedge.exe
1564	msedge.exe
1564	msedge.exe
2220	identity_helper.exe
2220	identity_helper.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1564 wrote to memory of 3832	1564	msedge.exe	83
PID 1564 wrote to memory of 3832	1564	msedge.exe	83
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 3484	1564	msedge.exe	84
PID 1564 wrote to memory of 4504	1564	msedge.exe	85
PID 1564 wrote to memory of 4504	1564	msedge.exe	85
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86
PID 1564 wrote to memory of 4860	1564	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e1d12cfcaf796d8b16ea0199f3a4fa97_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc81d646f8,0x7ffc81d64708,0x7ffc81d64718
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2968 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2612 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2612 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7024 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7388 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7664 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7028 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7700 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7448 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8036 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8052 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8068 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7948 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7872 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7516 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7956 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6668 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8048 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2108 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7612 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3408 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3808 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7764 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6952 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5696 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,16798912519701484315,4659736535151390110,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:5632

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2968

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1428

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x514 0x4f4
1⤵
PID:1184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b0eeae6-2abb-47e6-b524-16a5f64d641d.tmp

Filesize
2KB

MD5
e8d432393c1bc20c7bc4107960047ee4

SHA1
6c579b2302f7d4dc0cd2901090eab4484373704b

SHA256
92b1e05dca9dc17756d5061a90c5b904320cde66c5d65d822bc621441f639319

SHA512
f091ac57584307810313bc154664451456410cadb9111622f45d1d4b3271669f0460020875a2382f1ae7951327ddee145d7e494e9383545490bb33f66265edd8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
75KB

MD5
fd9576f1006cd56e70d460d4056c9919

SHA1
8a3c56543ed375c0f8e7cc38c21d9f1c5cbc812d

SHA256
7aceaaeccfde30945db093acac8cf173045a563061d5f022435a6f7e033880b1

SHA512
fd683ca3ea8983093c42bdd8caf85174ca6484d8d30ecd28475f81d5eefb17285225ad3351f0fcd6cfebd211dbb4f463984fd7b21f41a9b083d030c8e58e5d33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
91KB

MD5
c8f037583c8b49648901a7b8c20eb8e3

SHA1
1ff24a0d00919b305bda55a570719d46c0da8070

SHA256
7dc65ff266fd710e4673831c1e914d855aa48a672ad9ef4e8811e08497d57eca

SHA512
3f4936009ca3c17e1406f80924d696f68bd46fa4b5cea85e2431731b9c64fc995cd96f7a06640d52ec67f25d912e0960f1acde9f8b35e7b748e85c93b3c64754

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
95KB

MD5
fa20596b019086293c5cf17891f97d7c

SHA1
df4ce65afa8f2a439ae19564916d77cc6bbd5013

SHA256
d5e63e081d0ea199d60441c6318e8013af68929ba7432b3215857470c366858d

SHA512
457a9fb05ba4436769a159bbcfde07cbd0e5dea5845c0b7b13d38e205e38992bf2c6126d16da0be082edec1ddc0fbf652a390d1336a666c4dc21df05eb33300f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
107KB

MD5
ed83fe29c2d1bc5543959feb48f8c533

SHA1
d2f4978371e28c01e4875b20d7cc439a4ba3cd6e

SHA256
24e6250ae9bed53ea718d121e33dacd775c9ffba17a2270056297f82cf63954d

SHA512
6c349be0432f6069c558d420df836359665101afc3cf039d9a758bebbf36e0843cc54a952df6b89a809a75c27b12156c2e2a57f6ce7de8b61ac9c2beb508b4fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
58KB

MD5
32e83b35ba2644f4307eff171d132a59

SHA1
33c926293da5233bf23b983adddee7c60d123029

SHA256
47f5891f562e379f8824e0dfabfb3502336ae3d158e29268725c9d04ac1bfa5f

SHA512
4709031fe7d958c6ce94373db67cf36139c12d83f46e0220b3d85cd0e39faa9e3604af841b2b77d22559b72446d2619fd84a37bd373210d380abe3900361f35a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
87KB

MD5
27ebb57ca80d9efd1d7b2bb174af090f

SHA1
527a35fa8eb34124d8bdc9bee973de676977637d

SHA256
866c21d6cada368ff5a8049cb94a899b547fc763068036aacf94be7b24a2a40e

SHA512
230f0a48bcfe8c8552291b9fe4ff3f0a26da2903959478095b906b727ac97f6ee8105403671e58cc323d74ef7208d2cbb6d3f60185d952a0b3565cd1ce3fdd66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
68KB

MD5
ae0a4265d4db4667a8994b313ca54458

SHA1
b15d253899a66998907b2c60cc9781f24204122b

SHA256
bbd509f42e1a66e91e73bb195a7a837284c1ace0d35eddae02a52877ea20f149

SHA512
a9b6fc81820e80374cc843dcc2a8d129367b9244ca507349e609f26a3a138b3a7122e7500a037e1ef8eb35725d2f9e827ee8a9274c125090c59727d6f954f976

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
19KB

MD5
2a39f133a8af87dc3b845832ff6d30cb

SHA1
e67bba16969705430f54e65ad0a241ff987aa273

SHA256
0d4451ade7ff63c59585c3637be283849dedd52d49886c6a7e73ec1364337ad4

SHA512
45d828b3a0f890c5da32765549f5133ef074a5be630ffd0b24f712cccd6677f76ea134aeafb3d5a59fcd405cec3c36eca5dbf6ddd15c712cd2ed70c2d4882d96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
137KB

MD5
1b2192daa3b8ee47ae62f645f74c25c0

SHA1
ba3775111447700c4c906545619afb374b6081e2

SHA256
31182235624a4f02964aede9515aa866ea95c4e7614ef604c1c785046ccf5399

SHA512
29fc186b677ad2077cc16ca77242d11bb6ec9fff2d8ed612dbcb7e516e82b4650b7685e11deaf8a7bdfa42d6d0dc4b33cfd1de6103e3f1e3e29021005a109391

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
94KB

MD5
00f02eedc939b6addf13a2711a0bb464

SHA1
5bd56829912e856c6d25c31454f2eab10207e1eb

SHA256
59ae6b80bca226f1234d0ee7b948425fd90bdf6c0f70f0dab351ad05cb397ffc

SHA512
527071a0cfcb24f35a654a4a49ac24dfd030fbdd3eb8cdf5ce2e31a1bc12c1ce73f8c2f26eadd90bbfa402cf9d908ccdd799cd03141d1ffb278508fe09dcb168

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

Filesize
121KB

MD5
13100fe839e0b897e43f958d0d7342eb

SHA1
fa35fdb7e44aaaf92ec2913fc4550ee7c94e89ad

SHA256
efc8c6d3f419635c8b7ba1cf149e3eedcd81c8ea82cc6c05934e87d9c7062aa7

SHA512
43e2f82f2b6ae377cfc14b03d0d05b8a20cfc06704b77b7033b6f35bdf674b796d6ba8ecabdb2dd79c2639c50a45ea64fed49ca061ac842e32dbe7ee91e47e15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

Filesize
21KB

MD5
68d6c2571b31b2aec684df15d90a7d12

SHA1
81b540636375d8648d30839a810f73907923d1db

SHA256
33e3503ef3a7dc205b9a36025f8ec534daad28ae8773c930c245d463d250f472

SHA512
80ec5de9098f1d76afa04810a081730c2794c981114f9d750be0faa6c50869d451996b5f62bbbea1e4aa7b369c0a9c3cf652d1a84a1681ddba0797a8f71fd00a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027

Filesize
64KB

MD5
6fcd6c59368238de1423fd4ade220f2e

SHA1
a34bbbe3b03cc38c48224f98b705bce18eca444a

SHA256
5d49e35170fc187a63c2dd9fc8eb0da40a3ed03d7a5b2db41c0306970ea2561e

SHA512
ebdba53a7d3cc95f5f1bb3bed33550b81e8bb8d9534033ebaf421b860c9df52708540b9c26f57a37d6220239428c79a908dcaf295cf77aad05555c564b6d66dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

Filesize
43KB

MD5
612fce2d641a48330ea96f1b48b3da08

SHA1
7955594c2309b6bc0b2830079dad589255c9da8a

SHA256
f1ad004a79ecec4ac8dff8b44ff651645d41bcf2b5189ae76677e1e890de49f3

SHA512
2077e1a020e2a5762d5f7a0908ab40f233be1501c10ec31ce0d62b59f74a579eb90f1a3df4fcd8c58e91badb020846d3b35981ee21e07c7c685a5d87c53dde1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

Filesize
24KB

MD5
781b25827eb39f27411a424126b8ea1a

SHA1
615cba56c6aa734fc45edfeeb99c7943032be6db

SHA256
d4a50c0cd62c76dde42d4de81f452bd60ca44a7e316c481d776f307dbeccc6a8

SHA512
ee51aadccb247bc4e17cfc24ee90ed53750e3925004e00e26c9f77d1e299b498aff3b9dfafd208916aaace96a40d0ccc819ba6dbb6b2116cba057e6b8a4b4b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

Filesize
30KB

MD5
01ecb2802f22b51878d517a4520c0344

SHA1
1b4ef00b1d8ad21a9c0a481d12b3dc68f9c62692

SHA256
628c7fec764a88edaf665505222e824119fc411df6078cd210912e7ba04078ba

SHA512
6114150cdeb0130f7b78b77ab5da9c6b5d62bc352915796e9b8bc98874979d0a6d9dd8312e52875419bc88859731b7e6c8292b521004add641aef2ee577578b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

Filesize
40KB

MD5
93deddd480f006ca9b2f28047f65b1ef

SHA1
25a58475da745408a0e18d145a6318495dcd7dba

SHA256
e7bc64245490dc50c5dcfee3390977c0a4faa69bbe515e45dd412f2b143efb93

SHA512
1d0ae51861c03bbc6957ec1406bc93f9a2333b0ab58d64d6f8ef7a954741b5f5167fe116ba795fc94eef4c2ba1bdbcfc0c1f532666ba0e0706fa34fe728f482a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

Filesize
87KB

MD5
6fb3854bc6501b99ee5370bc82e97485

SHA1
6aefa4d321260f61564f3c11ecf131615f7deb63

SHA256
9c269ea9659b715463650b2944ea666e3bc51983c739bdcd73c282ef13384b3c

SHA512
3f1f56692c71e7618ab0288cdfba4346301f7a51919688a1f62592b5894830ca3ba9893314fb0605d98ae3b9fe267c7102767c44dd00c35a92775e1397b6bc63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

Filesize
34KB

MD5
65c58dcf4a218d657b66211388c86650

SHA1
c4238fdb8436244ebc4b524e625b15db85652a80

SHA256
b992ee569aabf786f45a1350ea727141b4d07f18c3ab14ae19668e1607d057e0

SHA512
17b09abccaa2c2d8a1e69b899281c1bb2244791ab1debac1097ce830c1b00890c644b7f92a023b2a6371818df1894f53d0361bd5a9ab4d8d911e1ad7936f094e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

Filesize
34KB

MD5
7ca7cf70bd4e31d50275764b3faa4538

SHA1
fbf25f6e7bc030643c30718614a8453dcd5a68fb

SHA256
fe8e3bbca0a10e5f3960856088faa8ccdc65a2915746a242549c80aba541f9f5

SHA512
a26e00306ad93b0eb68ebd271aa75a34ea8ebcc25504acac581f4e253cbf981aaa32df24c545d3cd7023382483b7d5a28e8725b0dabaa434fa9286916c57f188

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

Filesize
87KB

MD5
5da9ea748f871afd777b452f15c71f2f

SHA1
65603d39f5473276cbff6bf6f23e984240ec4f68

SHA256
e485cf8605b5490285c439b818a7123f5855c6a3e831b01046c6dc62718bac88

SHA512
6350082194e694f94d362acc53c21a5fa747d62834c56529f1901c3234a91510e0930cd559a0096461f2deb59c78b59c9c1878165fb30daa0af71d7554b2b5b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

Filesize
46KB

MD5
d1ca0691e3ed0723ab7bbac80e00140e

SHA1
58e0f48f7cdcddf2af35bb37c652e50f4eb6a3c2

SHA256
8b7122531f9e56f4e36e1453d61463e4889f92cbf63eeb8216dd390b6d9790f2

SHA512
543414c8f113318001d4763c757f1c4ba275df7782cca3b3da272a351a957eacfbba19a1ea7ec61fa233e312c5b65fb90d1532aed84d1f704d2c4690ea9dbd01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

Filesize
50KB

MD5
60793a4158cb7130f7272338409a7f30

SHA1
114d4dbc5d950c2b911b6af2cf5616211bee0e37

SHA256
29fef94b14d9892a454d72db2567b2ac59ad8e8f336adbac488fc261c5f62812

SHA512
013b20ec8caed0b28ed4a1299fe87f5432d40996258f9baccb54cf35465929d71f1dda2c699e739dcd44c622ec0fb5839a8ddf2bda795b26dcb9fd819230d3e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

Filesize
54KB

MD5
1e3b26010e612cbaa2502230712ff950

SHA1
8de7aa705114a6e8a7d2995bf49fb5978613d619

SHA256
867ec724475ec1bbf4538e83941f3f0ac2e4fa331b997de1932e06dbdf5f8d7c

SHA512
e908eca4d00fc8c15f3b41781088724e558149d56d3af855c8d352ef4a268f26ed5e7ee626d8207946bef527f2b60bc76195830de5fbd2427efc8aa1ef870b16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

Filesize
28KB

MD5
d1ddb6d1f5014905b73627f90b0690b1

SHA1
8cdc1a8103b87c464079bfe32ebb44bc84429bbd

SHA256
6e49570e2a98dafe12510bb2ea5e8a3cf76721a5097b7857189360e1a5f69e3e

SHA512
ac00f65836140e8ec36c8c570f6cf590b25884cdae13dc6b473112541c80cd0357f3bcb0b09c0ecd0f542709cfd7bfff4574b9cf2dc008b48d9bf2efa47f83ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

Filesize
63KB

MD5
297aea51ad629d949fb11f1c85583e7d

SHA1
6b5e1bf11e291115bb126ba0e0666ec14d5e0b35

SHA256
8209c8af58e313e065eada1fe6b9329a78af053d2431c827a12dc7732da965f5

SHA512
0b383354b546523a959147076ca8ed3cc43ad8382768e965628b58a3762f5d0d516a5dc19f455c6689020cb4ffa0ac8181b0080c1e4b23091e935216a3ab25f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

Filesize
39KB

MD5
cd2df74d8d36bc4f7e75806cd7e68fdb

SHA1
c6ec303935c8f54aadd368c9de8f2a28c690831e

SHA256
052bbc56f370f7553999a9ded2afc9897ed5e40249dbb6c9c7c465c4dc5e6bb7

SHA512
713c87562f49e0928fa6b8a51de4fe59057dcadc26fb5690d5fc2212ff20f9824e05580b52b0296f8605469f5c870c71ce7ebc77c95f62589ba3d1fe625c02c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

Filesize
51KB

MD5
7c4a476dc6a6572294b65e3e80c01c05

SHA1
eda7a7b491220dec5fc8e8ced0d1dbb2a5df3ba4

SHA256
0241771855e1e02368334385b44f8afe8bc63208975c6ced2c0a4180c4b683be

SHA512
f11cd8e0dbeeef66559e2377f52e3c202d9959cbe603c4c718c05ae000ffda7615c31e6bf7c19827e221153a5cfadd542ed050c21e10e4e0ec3b218f70ddceff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

Filesize
29KB

MD5
83b3b5729cdff3976db52c51831e96b8

SHA1
d23dc823e37f58e5366340be755730f3fa9a850d

SHA256
675fa88b39008a09994460a93b310a7d4593735009a9b24b6f176c347ad12421

SHA512
4f796f5c25e7a637825470ed1923e525edb98a2d10c1a65bb3a8fb6457c9eb562c61ae82fdfef05ceb49ad7a4140c946e528cf6814b07d79dfbd94df048a577b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

Filesize
75KB

MD5
39a31132f3b9c26002f8e42c98864fa8

SHA1
ee1880a931708e48b21aa1971c649928929cc572

SHA256
f3a76e8bcf1d324720e5a256850c21f4bc4f451d6f809d9cfc78570f69a097a5

SHA512
c5ff38b623b472bf32535d7fb76622f497d7719f48838e9d919e4438be014a945b1ce41840b2b6070663452730b861c3b4fae3e36ff09bdba5b22bdb2cc904d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

Filesize
91KB

MD5
90f5e9900b835cb46eb9bf2c9bca5b0a

SHA1
cfdf9d58cfce7894c908918f7cce1b7ffd76e340

SHA256
b648b9f8d872f21857b3a5efe98f4121e747abcfeadb06036f6ec8b838dca1c8

SHA512
5520a17ad5c4899607fa38312ccde19c2ee05ecde6de7df44774d378ce0e0a62c6cd6934be4f27e3c74221649aa8646d59073df958ba5884c59a07701de0cc8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\05dd29f7800ca2f5_0

Filesize
350KB

MD5
45a5e4217f524d1b73621ac40b96d443

SHA1
8d4722fbaad26c04567f2f67b85b1fca3df64e12

SHA256
0b6ad67fe969e94637acb84c19a5048f4fbf55478b0a2d6922083e2416f6ee00

SHA512
652bcb45ee7c0875339e742cadcf1b30bbd7d942165f5c143c76f9e551e9de45c49eca504f2e9a4deb90e0ac1493223349bcab611ddbce3cacfa2b1f9545f39b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0d03dc664493b882_0

Filesize
283B

MD5
2716a97d37c3b14ae5b716d77c5290f7

SHA1
b2c340f88e24fb84729c6c679a2852cd09caecdc

SHA256
e8e2946216d482d9f3e279a3e654ba6145634735cbc55d36a3e8e4292d5ba82c

SHA512
57de16d42b0496e990756baf3cb38d62723d0a02f72d13cae8b3720eae1d3277605ef166e200b2c24e9d33fff77eeaf0899171e9b9682b3a7037c7631f67f5f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\129aa3982859ed24_0

Filesize
268B

MD5
a18cf7804caccd05d02afe78ec2d5a80

SHA1
544ae23d32cecd8bf9fac5f75a31470237f4b90e

SHA256
e1327d8bdc6a17aed13f5a86c8a7457d361c1a5fc56648ab8b0f8d5244027ab0

SHA512
bd69308ffb2fb188b40030865b8995560816ee5a8cb37a2566bbb66434438dc749a266fc1f001da6736c1a21ad766e68ea41058b3f1555cf360b59a4b2a922af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2e601e41f76c8b2b_0

Filesize
282B

MD5
27f76926efb5a81e19c12c96c5e40e81

SHA1
4240667893dc1d5a482a6a3a9410c2e562413c0a

SHA256
ed09f1fee8abb5a43ea698e556f5d1eabf33a98fcf44ad1107416830dab71d64

SHA512
b69da032f67d85b83ee161ae91710abc0793ae11f34a3c79d0a81d9eeccdf38ffbb63f26d11ee5a04ea299540551a62b587e03609026c016611bb4dfc7c3cc37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4237432f0623f854_0

Filesize
333KB

MD5
30fa596e21c2d43f36bb584ffbd981c6

SHA1
27f47b9b3d01ea00174fab89d4a011d960ad46f4

SHA256
cd171e811f211521fe76e43500dbe209ad9d3f8cf486790e441faf10525c3875

SHA512
bc0785c012156ba0bf31fc631d6961fe7f483e5db5cf86916b28c56aa8d66261daa6e4c17cd82584578786289b97e795aa843fbe62e6b9d6c9fdd94c5977e0bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d8d6644f5238bd3_0

Filesize
255B

MD5
49de3ec5ca7f99a9b576a70c58f26981

SHA1
a385c32eecaf47b2c52d1702bf6762329aaf94d1

SHA256
9c6e11b483ead092821afada2124bf318c090e2951994324ba35ef67f2ce7224

SHA512
f09f2139caae084a4b53e15502141996b6df46048bb7ad4c793731061e359afec1af1d1ae64a2e1c1cc12286fa0fea870c2a288f5cb1d7073f9d30d0b64ec527

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b6b653402da1851d_0

Filesize
67KB

MD5
4bb16f6a96cd500ae0bf52cb3d9067e9

SHA1
36542628632bc7af67f9be31d2b1973ce939544a

SHA256
531dd5a6732380995bb2f2438d59aedf00e970a4ffc2125c9a4c01969ac63740

SHA512
759f7411e563bb1927f508b76575670af5189d294b1c8221c81b3bc3d1d5a33b4156651cf95b15c5c03780a93113ac79673f142cebad4d4673da51d67892844f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c1234af5a22e4da8_0

Filesize
314KB

MD5
46ab469e8c4e8e1e2f4a1250689f616b

SHA1
421d6ca75ee83877faf041a81a964364474e2c8e

SHA256
8043c5c1f10c56726172ba401b74702dbeda4f2f65301c9046764e64a1e75592

SHA512
75b93da0736c36219c6a659409d177fe88d8eafc8ad8fc6893817336c303aabbc932b11f8e08e591788dc9efde081467d056177da3a7367e85cfc4e24cb404e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c799814cb2c2de1a_0

Filesize
263B

MD5
1979180f0ac334313916682fba4cf88c

SHA1
6747b88ade0b72b2d9b7d654a92e4fc6488bd6db

SHA256
9a5401eb48164a61c1f28a1a785fbd7dbc8c3f76a46466d45e9e3f26b8bd70dc

SHA512
e9b74fb6406b2c83d5771a7ac5b11421f3ec3b5ed9acd0563a9f0e91c841a6c79b9d844d3cb5b7afc397981f771f5f3d7f56194b374be9d5cddb48ee46ebc759

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cb4a18966c28c653_0

Filesize
200KB

MD5
1c2afa1cd58ee51f488dbc4bb7c88e96

SHA1
e8a71b1830a0c0569fc9cf7cf4e63621ce5c93c6

SHA256
3626697d0262440538713e1947877ec5151259a01a4d8b94b06e31ac1514746e

SHA512
b180d6f4851cf23ba7b8e7d12a042686d87e2475e7950803f9d7a8ec5bffbb4c5ab6aef91a271483fc844de751177b0bceecbf73f09f5a73bac1fb485b968ebb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
7c3ae9afaa9400b4c18180a87ce58a73

SHA1
26d19503362d025c9f3efe7faa4416edceb9b164

SHA256
327591cbe648d7252f8dc11e453fb582f010901236a9ddcc4f13bd21617405af

SHA512
ec7614f6682899d8a28e4856d04be143c4ed45fe1a70552ffc459c89104a24d57a7d90935bf1badca34390effce4f73d513f65165d1e723df87ca9306a51a7d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
fb113f5171db66840bb21221228f0ec2

SHA1
aa4125262654d65f713cff769d1f6e0b236e0f93

SHA256
96c2f63a94cec8e73a9343d4a35d98fa534b776746f2f06ca15e528a676e40b1

SHA512
502749e10edf1e73fc2ad7ea13da51406b920439b4b052cfd666707122d50b21239977c056d2fca7fa8586be9830c674c1abdc0949044c25afb97476b84a0ac7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
c09e0f1f64c9290ea06bc6b92cd93e4c

SHA1
2e02a014b683ec1277c564feee027e5c0d5d10b9

SHA256
741e2c152e099964a698ce635076dc6fe460c1d68bb866b325887adc85ad64c0

SHA512
5da036ad326dac3d99f97ade2ec411e23e43c1c9376f9f3cd4df97c020fcc544635c09bab9a2e72de3d04265c7756ce32e079684e10a14df5417f37ee6db4d35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9fd64f3e153986d8347aabeaef337f0d

SHA1
d24e262316afbc3a7f646d4c62cef2eda3dd8a44

SHA256
24330eff4b9efee3bc6eb41fdbd17bde04123fda76d107a9102a9372dfc21778

SHA512
02033b07180390fb32e502cbf4d4c4fb71996c62795ee92224e46d2fb0db02a7af117a55ef116274c1dbb52c9cc79e74f1036df44b0eb09a5348ffea9e2adbaa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b44934323da44c858f4efe4b6624053a

SHA1
24afb0e70b9074759cf2f2bd7be9182bc1d0a8fe

SHA256
d30ba40c58bfe1bac366fd56a9eb658fb60e26145fe0043ae7dd4f3b66eb4b0b

SHA512
a3369b9193e3e1dd3b188e990009f268ce856128559db505afcc091ed4797640ea5c06c0c6a5659ce8843af0e327260c680c9b976219c04d3520d9fa4549f5a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f9a61d0a3f8ff85d855eb84f8176b82a

SHA1
001984f57b62f402f689249627c03d2bd0b96d56

SHA256
6fc9ea1814ba94ab85ee8526ed182d52c8274dbdeeba46035373d4bf740897fc

SHA512
4094dda0cd8bf5294f88ff35e6ab599a21813db6ee3aac33351625f81e1b7fcdd4fb00756a84b64b8c6ef820a881e1ee7c547d5e8223d06803a1c8b8546c025c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
fe6e140dce2c5f2240cd0d5f1465dd6e

SHA1
c88121365fe382a87cb39deedaf2f4f2c277130f

SHA256
3160c125f914742a0325eed2800e5e6559f9d8867d53acaec9c16d6b786c33d7

SHA512
f48df031b18ef69d20a513e8b3f5fbe2e6cdf36aad8e35fc771abff824783b4198e82ff2f585c05b06423829435082a5b945205742e1742765e1e3a4f42c2554

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
c933bdf501768f38bd4e23ce723fd0b5

SHA1
55d11a4289270e2d82ae5f1ff523137a1538dd28

SHA256
25e2be0c7019a62df1fbda34b89f5cb633b95355725f9f5fe8da61585ea5098c

SHA512
7429b8d304e7d04281fb9d20a5334f748dc08c91358587af74068bd179fdf441d5646ed70332c4aeb70daffc026e969ff8d56983e56ab924b5980e999d7ad1e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
6f9f39023b2ee95cea28c692d59c02c2

SHA1
79ed0ddc1aa251dc7f01d19334be4901ccbd2113

SHA256
4c863a04d48f1173802c699a2b4a98d6400d83852f7f21a81db5c4fe15b50274

SHA512
85b99847840867c0b1d8e48fa3dfa61083bbd9c9cd57e43682ecaabddf057cc4098aea2c60c65cb5120307461e1a82e1e0092ca1df6abccb801bcaa22035fb43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fd8fa98e4b62ab3462ec5987121bc794

SHA1
fce9f3e4d6e8df582eb7e1d4a6d70d61ec976f3f

SHA256
b16db40c7afbafe74b2c2e13c67de92d0871a62f3aeddce15defe84e92a4ef42

SHA512
fb59ec2e50ae0e8466f052c1c0e89a6c3e7f8f9bc69544a8b6f6f6da5dd1e512ea79f082bcbb2ae1c2e61725187cf9ab3fbc1a24a55c3b7d41b02e76733ecd40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4d5a23924fa4c4908caa29cea3569982

SHA1
352362383f568429a77150a8e9612312a3906cc5

SHA256
0a3aaa6c0bc930a5fee177cf98e6b2dedde10b0dbf750d0f30c1d679a82073f4

SHA512
9e83a9a297de371cefb313b1d95bcd24765390c43bf88604111a681f41ae61cf122a4fd5b92979e8efe05d913c1335eb21fac7768cb28c78ad5d7ae994232d7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
ed5a5e1fbe0aa39170bf66cb66fcbd1e

SHA1
32479bcc12fb0290d0b45829d02f551daed8849c

SHA256
9626234709b70c38c94813f39145b7aca5288f8727e15837582f5a4e61af39af

SHA512
96d39aa9f4a79d8f3e604952825bb29c03d5ac05b8ee6de0eabf18db044a64450fca2850bd3629bf0f67672d91fcb8eb1a4be34b1f8243d8f9caa47b6db2fd19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
704B

MD5
a2fdadf7c324d0cf267fcfdaefd634ad

SHA1
e3b4aae5e4cfaf878efb602c5a91ae3d9e04c48e

SHA256
954d5e3002f1539256d43be1d95918e1576938166ed3d49bf1f8b4a2d3a995c5

SHA512
02be0337d3e479115337ee0b5a2dd065cd0c43057799843f3e6d04c8b388e672fb33afdc202e70d2759372cc70cb0b4eb71f396c0aa47582619ec2d60b24e8e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583c49.TMP

Filesize
538B

MD5
b21cf3370468e331fc72b81d09a1c214

SHA1
e9e47e57edcf581193ffaa1b61dd478cd2bf2fdc

SHA256
5cfae4c13e471dffb6c3fefe0bc5dfd8a563f29f9335b69b56774988ef579c70

SHA512
b4a638e2cd5e6c035c7301097618115cf6538ef6178038137e9bf80148c28408e2f111efcec4ba859443453876f005069062a2a7041b0de7650f469798571533

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
6009c8e5b43368ac0b21f938e117cd65

SHA1
134ce01a08f4021a89468acef0c1fdf05f120904

SHA256
c167278aa3e76966c65be9da258dd7d3d33e8bfe2a4e0efa11265361ce945724

SHA512
a1f0d8f2c38947849b56765c322debaea36634c3f741e22ebee734342773a217589885f58ec23412505870417ac321836c6311cc3ca9a14e6040d5a3378cf11a

Download Submit