75ca2123d45e7ecd05302d30c5698bf2d8568fab0180e88a34b2c02d0f22a776

Analysis

max time kernel
861s
max time network
862s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-01-2025 13:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

WhatsApp Image 2024-08-25 at 19.33.05_6c080608.jpg
Size

177KB
MD5

b3dfd0f1bca744c76fcab4bc589d20db
SHA1

a4c87904c334aa5615af289f1161f5580ae1090e
SHA256

75ca2123d45e7ecd05302d30c5698bf2d8568fab0180e88a34b2c02d0f22a776
SHA512

804a10dd8f659133a24d1c95cea51e03797f1b58f520d1f56481b83e848f29379712f47e3ea5a1ade7365de50d86f26f116b5afd8faa81963dfec3c98c68c1c8
SSDEEP

3072:xkvjJkb9AMd4tGUDEiczQyMhdM2Hj6YXzYzG4Rwqhe9wjybTgaVLXAkJBzKQ/U:C6b9AMutGUwic8yMhdM22Rwqhe+mw+Bc

Score

8^/10

microsoft discovery evasion motw persistence phishing privilege_escalation trojan

Malware Config

Signatures

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe	MicrosoftEdgeUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0"	MicrosoftEdgeUpdate.exe

A potential corporate email address has been identified in the URL: AmazonNavigationCards/development@B6276730796-AL2_aarch64
phishing
A potential corporate email address has been identified in the URL: currency-file@1
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: qos.skin.loadedToUiReadyDuration@v19ums
phishing

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\Control Panel\International\Geo\Nation	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\Control Panel\International\Geo\Nation	setup.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 25 IoCs

pid	Process
4888	RobloxPlayerInstaller.exe
1088	MicrosoftEdgeWebview2Setup.exe
5592	MicrosoftEdgeUpdate.exe
3996	MicrosoftEdgeUpdate.exe
5484	MicrosoftEdgeUpdate.exe
1264	MicrosoftEdgeUpdateComRegisterShell64.exe
5280	MicrosoftEdgeUpdateComRegisterShell64.exe
5684	MicrosoftEdgeUpdateComRegisterShell64.exe
4724	MicrosoftEdgeUpdate.exe
2224	MicrosoftEdgeUpdate.exe
1212	MicrosoftEdgeUpdate.exe
5608	MicrosoftEdgeUpdate.exe
5624	MicrosoftEdge_X64_131.0.2903.112.exe
2804	setup.exe
3964	setup.exe
5800	MicrosoftEdgeUpdate.exe
3624	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
3496	RobloxPlayerBeta.exe
2436	RobloxPlayerBeta.exe
1804	MicrosoftEdgeUpdate.exe
4576	MicrosoftEdgeUpdate.exe

Loads dropped DLL 27 IoCs

pid	Process
5592	MicrosoftEdgeUpdate.exe
3996	MicrosoftEdgeUpdate.exe
5484	MicrosoftEdgeUpdate.exe
1264	MicrosoftEdgeUpdateComRegisterShell64.exe
5484	MicrosoftEdgeUpdate.exe
5280	MicrosoftEdgeUpdateComRegisterShell64.exe
5484	MicrosoftEdgeUpdate.exe
5684	MicrosoftEdgeUpdateComRegisterShell64.exe
5484	MicrosoftEdgeUpdate.exe
4724	MicrosoftEdgeUpdate.exe
2224	MicrosoftEdgeUpdate.exe
1212	MicrosoftEdgeUpdate.exe
1212	MicrosoftEdgeUpdate.exe
2224	MicrosoftEdgeUpdate.exe
5608	MicrosoftEdgeUpdate.exe
5800	MicrosoftEdgeUpdate.exe
3624	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
3496	RobloxPlayerBeta.exe
2436	RobloxPlayerBeta.exe
1804	MicrosoftEdgeUpdate.exe
4576	MicrosoftEdgeUpdate.exe
4576	MicrosoftEdgeUpdate.exe
1804	MicrosoftEdgeUpdate.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxPlayerInstaller.exe

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc
351	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html

Checks system information in the registry 2 TTPs 14 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe

Detected potential entity reuse from brand MICROSOFT.
phishing microsoft

Suspicious use of NtCreateThreadExHideFromDebugger 6 IoCs

pid	Process
3624	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
3496	RobloxPlayerBeta.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs

pid	Process
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
3624	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\Locales\kk.pak	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\Locales\id.pak	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\StudioToolbox\Tabs\Shop.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\9-slice\hello-button.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\PlayerList\FriendIcon.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ViewSelector\top.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\Trust Protection Lists\manifest.json	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\sounds\action_footsteps_plastic.mp3	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\DeveloperInspector\Close.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Controls\XboxController\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\InspectMenu\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\PlayerList\NewFollowing.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaApp\icons\ic-more-friends.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\graphic\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\fonts\SourceSansPro-Bold.ttf	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\icon_ROBUX.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\identity_proxy\win11\identity_helper.Sparse.Internal.msix	setup.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\Trust Protection Lists\Sigma\Content	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\Extensions\external_extensions.json	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\LayeredClothingEditor\Icon_MoreAction_Light.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\icons\navigation_pushBack.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\LuaPackages\Packages\_Index\FoundationImages\FoundationImages\SpriteSheets\img_set_3x_3.png	RobloxPlayerInstaller.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\Locales\bn-IN.pak	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\fonts\families\Nunito.json	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\MaterialFramework\PlasticWithBorder.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Controls\XboxController\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\VoiceChat\New\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\ImageSet\LuaApp\img_set_2x_1.png	RobloxPlayerInstaller.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\Locales\fi.pak	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\fonts\Fondamento-Regular.ttf	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\AvatarEditorImages\circle_blue.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\icons\ic-close-gray2.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\identity_proxy\canary.identity_helper.exe.manifest	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\AnimationEditor\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Slider.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\Controls\DesignSystem\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\MEIPreload\manifest.json	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\msedge.dll	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\DeveloperFramework\button_arrow_down.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUB37A.tmp\msedgeupdateres_ml.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\fonts\families\SpecialElite.json	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\concrt140.dll	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\PlayerList\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Settings\MenuBarIcons\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\PlayerList\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\9-slice\system-message.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\graphic\gr-indicator-ingame-14x14.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\graphic\gr-profile-border-48x48-dotted.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\particles\forcefield_alpha.dds	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Controls\XboxController\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\CollisionGroupsEditor\checked-bluebg.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\VoiceChat\MicDark\Error.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\graphic\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\mip_protection_sdk.dll	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\particles\forcefield_vortex_color.dds	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\TerrainTools\mt_terrain_clear.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\InspectMenu\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\ExtraContent\textures\ui\LuaChat\9-slice\btn-control-sm.png	RobloxPlayerInstaller.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\identity_proxy\win11\identity_helper.Sparse.Internal.msix	setup.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\Debugger\debugger_arrow_curve_left.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\Slider_dn.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\content\textures\ui\VoiceChat\SpeakerDark\[email protected]	RobloxPlayerInstaller.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeWebview2Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxPlayerInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 3 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
4724	MicrosoftEdgeUpdate.exe
5608	MicrosoftEdgeUpdate.exe
5800	MicrosoftEdgeUpdate.exe

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe

Enumerates system info in registry 2 TTPs 7 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerInstaller.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe

Modifies Internet Explorer settings 1 TTPs 6 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox	RobloxPlayerInstaller.exe

Modifies data under HKEY_USERS 41 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	MicrosoftEdgeUpdate.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService\CurVer\ = "MicrosoftEdgeUpdate.Update3COMClassService.1.0"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\ELEVATION	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods\ = "16"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.Update3WebSvc"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\CLSID\ = "{9F3F5F5D-721A-4B19-9B5D-69F664C1A591}"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods\ = "12"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService\CLSID\ = "{CECDDD22-2E72-4832-9606-A9B0E5E344B2}"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods\ = "41"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0\CLSID\ = "{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}"	MicrosoftEdgeUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\Elevation\Enabled = "1"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ = "IApp2"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc.1.0\ = "Google Update Policy Status Class"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ = "IPolicyStatus3"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.ProcessLauncher\ = "Microsoft Edge Update Process Launcher Class"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ProgID	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ = "IGoogleUpdate"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\VersionIndependentProgID	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ = "IAppCommandWeb"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods\ = "4"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ = "IGoogleUpdate"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\version = "version-b71c150c7c1f40de"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods\ = "24"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ = "IJobObserver2"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\ = "URL: Roblox Protocol"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods\ = "4"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback\ = "Microsoft Edge Update Legacy On Demand"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\ServiceParameters = "/comsvc"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ = "IPolicyStatus2"	MicrosoftEdgeUpdate.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 583419.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 51 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
2712	msedge.exe
2712	msedge.exe
180	identity_helper.exe
180	identity_helper.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
2740	msedge.exe
2740	msedge.exe
4888	RobloxPlayerInstaller.exe
4888	RobloxPlayerInstaller.exe
5592	MicrosoftEdgeUpdate.exe
5592	MicrosoftEdgeUpdate.exe
5592	MicrosoftEdgeUpdate.exe
5592	MicrosoftEdgeUpdate.exe
5592	MicrosoftEdgeUpdate.exe
5592	MicrosoftEdgeUpdate.exe
3624	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
3496	RobloxPlayerBeta.exe
2436	RobloxPlayerBeta.exe
2436	RobloxPlayerBeta.exe
2436	RobloxPlayerBeta.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
2508	msedge.exe
1804	MicrosoftEdgeUpdate.exe
1804	MicrosoftEdgeUpdate.exe
1804	MicrosoftEdgeUpdate.exe
1804	MicrosoftEdgeUpdate.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: 33	5248	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5248	AUDIODG.EXE
Token: SeDebugPrivilege	5592	MicrosoftEdgeUpdate.exe
Token: SeDebugPrivilege	5592	MicrosoftEdgeUpdate.exe
Token: SeDebugPrivilege	1804	MicrosoftEdgeUpdate.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of UnmapMainImage 6 IoCs

pid	Process
3624	RobloxPlayerBeta.exe
5560	RobloxPlayerBeta.exe
2820	RobloxPlayerBeta.exe
1584	RobloxPlayerBeta.exe
3556	RobloxPlayerBeta.exe
3496	RobloxPlayerBeta.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2712 wrote to memory of 2508	2712	msedge.exe	106
PID 2712 wrote to memory of 2508	2712	msedge.exe	106
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 3560	2712	msedge.exe	107
PID 2712 wrote to memory of 4384	2712	msedge.exe	108
PID 2712 wrote to memory of 4384	2712	msedge.exe	108
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109
PID 2712 wrote to memory of 1840	2712	msedge.exe	109

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\WhatsApp Image 2024-08-25 at 19.33.05_6c080608.jpg"
1⤵
PID:4888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fff26ca46f8,0x7fff26ca4708,0x7fff26ca4718
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:2508
- - C:\Windows\system32\WerFault.exe
    C:\Windows\system32\WerFault.exe -u -p 2508 -s 1248
    3⤵
    PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1076 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6664 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7412 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7152 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7256 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7548 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7848 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8416 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8836 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7836 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8180 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7552 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8516 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8964 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8152 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6984 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9096 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7268 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8976 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8568 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8860 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9052 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7756 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8996 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8772 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6464 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7864 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9144 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8676 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7308 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7672 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6572 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2828 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8328 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9440 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9428 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8948 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10124 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10044 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8440 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10080 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9940 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9616 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9164 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8196 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9548 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7260 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10156 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9812 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9724 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8088 /prefetch:1
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9096 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10320 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9476 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10280 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=9792 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10156 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7264 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9204 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9084 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8876 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7872 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9320 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8072 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9672 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8176 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7804 /prefetch:1
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8228 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3112 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6836 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8240 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8912 /prefetch:1
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8508 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10356 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8772 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8368 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7296 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9568 /prefetch:1
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9380 /prefetch:1
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8764 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9608 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9652 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8200 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7968 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7652 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1348 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8100 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1860 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9924 /prefetch:1
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10248 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8940 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10308 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2976 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8824 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1404 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9356 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15112876024863509400,546103357977337880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9012 /prefetch:1
  2⤵
  PID:5328

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3896

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4cc 0x468
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5248

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1212

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:4888
- C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
  MicrosoftEdgeWebview2Setup.exe /silent /install
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:1088
- - C:\Program Files (x86)\Microsoft\Temp\EUB37A.tmp\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\Temp\EUB37A.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
    3⤵
    - Event Triggered Execution: Image File Execution Options Injection
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks system information in the registry
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:5592
  - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:3996
  - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:5484
    - - C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:1264
    - - C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:5280
    - - C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:5684
  - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RjQ0NDJEMjktOUI0OC00NTVDLTk1NTMtMkYwNkFGOTAxQzJDfSIgdXNlcmlkPSJ7NTFFQjE1MzYtNTRFOC00MURGLTg5RjgtREM4QTU1QjE2M0Y4fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsyQzg2RkNFQi04QkIyLTRDRkItOTAwQi0yNDFGQjE3MjE2OEV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNDcuMzciIG5leHR2ZXJzaW9uPSIxLjMuMTcxLjM5IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMDA4ODI1MTg5MSIgaW5zdGFsbF90aW1lX21zPSI2MjAiLz48L2FwcD48L3JlcXVlc3Q-
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Checks system information in the registry
      System Location Discovery: System Language Discovery
      System Network Configuration Discovery: Internet Connection Discovery
      PID:4724
  - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{F4442D29-9B48-455C-9553-2F06AF901C2C}" /silent
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:2224
- C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
  "C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe" -app -clientLaunchTimeEpochMs 0 -isInstallerLaunch 4888
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of NtCreateThreadExHideFromDebugger
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of UnmapMainImage
  PID:3624

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
PID:1212
- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
  "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RjQ0NDJEMjktOUI0OC00NTVDLTk1NTMtMkYwNkFGOTAxQzJDfSIgdXNlcmlkPSJ7NTFFQjE1MzYtNTRFOC00MURGLTg5RjgtREM4QTU1QjE2M0Y4fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins4Q0I0QTQxNi1CMzBCLTQwRUEtQTk5Mi1GMzBDNjgwRDdGREV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBuZXh0dmVyc2lvbj0iMTIzLjAuNjMxMi4xMjMiIGxhbmc9ImVuIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjMxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSI1IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMDA5MzYzMTc2MiIvPjwvYXBwPjwvcmVxdWVzdD4
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks system information in the registry
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:5608
- C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\MicrosoftEdge_X64_131.0.2903.112.exe
  "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\MicrosoftEdge_X64_131.0.2903.112.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
  2⤵
  - Executes dropped EXE
  PID:5624
- - C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\EDGEMITMP_91F6D.tmp\setup.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\EDGEMITMP_91F6D.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\MicrosoftEdge_X64_131.0.2903.112.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Drops file in Program Files directory
    PID:2804
  - - C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\EDGEMITMP_91F6D.tmp\setup.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\EDGEMITMP_91F6D.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=131.0.6778.205 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{108872E8-1542-47E1-9E1C-0074A434E354}\EDGEMITMP_91F6D.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=131.0.2903.112 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ff7d1852918,0x7ff7d1852924,0x7ff7d1852930
      4⤵
      Executes dropped EXE
      PID:3964
- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
  "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RjQ0NDJEMjktOUI0OC00NTVDLTk1NTMtMkYwNkFGOTAxQzJDfSIgdXNlcmlkPSJ7NTFFQjE1MzYtNTRFOC00MURGLTg5RjgtREM4QTU1QjE2M0Y4fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins0NTUyQkM1Ni0zNjQ3LTQzQkMtQjM0Ny1DNkY1OEMwMUREQzR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTAxMDQxODE3MTkiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMDMyNDA1MTU0MCIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgZG93bmxvYWRlcj0iYml0cyIgdXJsPSJodHRwOi8vbXNlZGdlLmYudGx1LmRsLmRlbGl2ZXJ5Lm1wLm1pY3Jvc29mdC5jb20vZmlsZXN0cmVhbWluZ3NlcnZpY2UvZmlsZXMvN2Q5Y2Q5M2MtMWQ1ZS00NDliLTlhZDctZjFlOGQ2YjkwNTA5P1AxPTE3MzY0MjgyMzEmYW1wO1AyPTQwNCZhbXA7UDM9MiZhbXA7UDQ9WXFYY2NnRXpjSnJSSWFSdzRsZklTelNsbWFhJTJmRXkxVEJKWmc3U2RFS3R5STRCWVJzekRiZFp4R1loaXN1cHYlMmZrTktraU1lRHNpMWthd1MlMmJlMkVQVUElM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIxNzY4NzA5NzYiIHRvdGFsPSIxNzY4NzA5NzYiIGRvd25sb2FkX3RpbWVfbXM9IjE1NTUwIi8-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-PC9hcHA-PC9yZXF1ZXN0Pg
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks system information in the registry
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:5800

C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
PID:5560

C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
PID:2820

C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
PID:1584

C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
PID:3556

C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
PID:3496

C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-b71c150c7c1f40de\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:2436

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4cc 0x468
1⤵
PID:5544

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4172

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1804

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- System Location Discovery: System Language Discovery
PID:4576

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.112\Installer\setup.exe

Filesize
6.6MB

MD5
f0dc48bc6e1b1a2b0b15c769d4c01835

SHA1
66c1ba4912ae18b18e2ae33830a6ba0939bb9ef1

SHA256
7ada85f31a3b501eaecd2aa37b8df1f74b470b355279b5db2d1fbc0bb7de4889

SHA512
d2ceeaf987446f7463e84a6286dc1c8f50a80466af641f77d174826189ff5a56b048e616ad8d97ddb12a2f68e182af80309be717367224605c06dcf74a84cc0f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

Filesize
201KB

MD5
4dc57ab56e37cd05e81f0d8aaafc5179

SHA1
494a90728d7680f979b0ad87f09b5b58f16d1cd5

SHA256
87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718

SHA512
320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

Download Submit
C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

Filesize
7.1MB

MD5
dc0a0de94ad86e22785e385a4fbbfe2f

SHA1
8dcd6f06fba142018f9e5083d79eac31ed2353d7

SHA256
a4e80eba29eec1e534950f605de2bba0a174e9eaf56c82fd6f4d221e93667f92

SHA512
39582cda82f479e5e25fc2021878d071261b71efbb68f827599d4020de61698273a2cde3d1dc323d14205615a509687ad1e04f1e25626c0826c6f297f5a75dce

Download Submit
C:\Program Files\MsEdgeCrashpad\settings.dat

Filesize
280B

MD5
3a90bbf1759244319c926644f1ddca95

SHA1
3e558c297e294bb702dca7c3aa9bdf693f41fb59

SHA256
2ad9fc102a68b13ffce333a212370e03830480636bf563805dcdf1bf36a3d6d2

SHA512
014dbe2ed614c28837922ab1b14124f5509bd0f15611dcf520e922355f6b40f99425501731e5d8710f1d424400e44e17c3ec398d3abb5167deabada81feb8bf6

Download Submit
C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

Filesize
89KB

MD5
1dd4bc9a55232c285b04bc2c50126a26

SHA1
dd00bcc25dd87c34b9cd09e2e448129581419c50

SHA256
c9e373af86f0825d1fc81b840d42426f53bdd07253fe6fc678d4beb3e65f5c63

SHA512
1996fd1355add674f96763ad117dc08501f582418ff6693f9b7df6538e86b5238656bffceb14a9aa7f848574778aa9da91233cc709b4122fa3a43872547b7058

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata

Filesize
150B

MD5
bc628e7c7778debd00d45d5ebbccaa34

SHA1
b644f4d8d0cfd032a3fa66532320a0e2b332a98a

SHA256
5b624c606f45133a5748f9ef5af22d7941b09371201fc04896988a12c88cd152

SHA512
14fc49512a6ceee5b8e250f8853722b337aaae12f5a8ed681b15ed731eee7ae5ef9289a5927c1688e379ce6f4d98304a92527bb9242e5cc5445391ec22123b2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\ed804d5d-f3fe-427c-8ffc-979281287477.dmp

Filesize
4.0MB

MD5
7f4d35c10e97157a55dd260c848fc306

SHA1
0b1ad64e6e87dcdcb6977d8215820eb1743c66a7

SHA256
c9d3f6fdcf499fabba25ef1194145bb9e4546cf94cf16d4d4ec70df15358fe81

SHA512
976366a155bcd068257e5bbef013cab1ce02901082d471801686ecb38973a011e9d518de2c6ff468c3fe4e172afab0326af70bd55bc47708148db869defa9970

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\f70fe9cb-5555-49e9-aef0-7188ed41e8b1.dmp

Filesize
3.9MB

MD5
e12a101913804cb4db8226dda4cbb42c

SHA1
cbb452a4937268210b76bebecc0267298105b2d6

SHA256
a47cc539a0dfe93b160fcaf3be57f51611c90a814ded9cc9440d2e04ccf7e80b

SHA512
c2acd0e730b0ccb26a658d899138ffe5afe3209e5f3b83e335cfd4b16c45b999498777bec248247f8f7331e7e130cdb5129aad647a67643bc5dd40b5d925d812

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
99afa4934d1e3c56bbce114b356e8a99

SHA1
3f0e7a1a28d9d9c06b6663df5d83a65c84d52581

SHA256
08e098bb97fd91d815469cdfd5568607a3feca61f18b6b5b9c11b531fde206c8

SHA512
76686f30ed68144cf943b80ac10b52c74eee84f197cee3c24ef7845ef44bdb5586b6e530824543deeed59417205ac0e2559808bcb46450504106ac8f4c95b9da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
443a627d539ca4eab732bad0cbe7332b

SHA1
86b18b906a1acd2a22f4b2c78ac3564c394a9569

SHA256
1e1ad9dce141f5f17ea07c7e9c2a65e707c9943f172b9134b0daf9eef25f0dc9

SHA512
923b86d75a565c91250110162ce13dd3ef3f6bdde1a83f7af235ed302d4a96b8c9ed722e2152781e699dfcb26bb98afc73f5adb298f8fd673f14c9f28b5f764d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
452a73600ffe29903681700b99d33e3d

SHA1
a3954a25aed9ff1a2ef813e767ea11d58b1d24e3

SHA256
698003aaf425e88ed880a9302d9ca4c923df6f7dfe7db9ca37dc4538088ff110

SHA512
dbde12061b2b18f0dabb3bcb1f6a456ebea3949cde562d6385d322092b2d99eb07ecc4b51f8c3608fdce914d75c9c6e28f2876032f2dd5cdb2d5466d6a0b3629

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
248KB

MD5
9066ee7294033fb27b6447f341dd3d52

SHA1
5f69dda963a553e08ce8e1b84c0c12416a2bb971

SHA256
117899f51c4ccff1b473bc2e419714caf0da9ebdf2ca50404b8e1614f309197e

SHA512
becbc742bc0fffd3e3865b2bf4a2e44d512f282c8f6c70c9d35d3d2f4348b6a9300edb3bd22914a9538130b7c3e18d3c27fdf164a6e6514638aaccf9ab00ebea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
37KB

MD5
23d1bee200acb8a90814ef4ca2cc1318

SHA1
4272419ec7bf7cfe3e1e48d0dd132651fe7f10e7

SHA256
01a79a7205afee1d23e2d0cbc8803cfe576f89107f7dab76362baf45a5f39749

SHA512
48f353f5f52f4a94a5d3728bf7ed2d02c6b76bbbc587f6c5e9545193a75b104a7a9f40bcf30742bc91d9faa8b9b3b0c77f94b0c1f73263f73ac9c371a71f8fba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
47KB

MD5
0d89f546ebdd5c3eaa275ff1f898174a

SHA1
339ab928a1a5699b3b0c74087baa3ea08ecd59f5

SHA256
939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

SHA512
26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
62KB

MD5
c813a1b87f1651d642cdcad5fca7a7d8

SHA1
0e6628997674a7dfbeb321b59a6e829d0c2f4478

SHA256
df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3

SHA512
af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
19KB

MD5
1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5

SHA1
6dd8803e59949c985d6a9df2f26c833041a5178c

SHA256
af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725

SHA512
b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
63KB

MD5
226541550a51911c375216f718493f65

SHA1
f6e608468401f9384cabdef45ca19e2afacc84bd

SHA256
caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5

SHA512
2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
26KB

MD5
5dea626a3a08cc0f2676427e427eb467

SHA1
ad21ac31d0bbdee76eb909484277421630ea2dbd

SHA256
b19581c0e86b74b904a2b3a418040957a12e9b5ae6a8de07787d8bb0e4324ed6

SHA512
118016178abe2c714636232edc1e289a37442cc12914b5e067396803aa321ceaec3bcfd4684def47a95274bb0efd72ca6b2d7bc27bb93467984b84bc57931fcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
147KB

MD5
8dbf60de74ef8a6a746625f35e8f3cbd

SHA1
6f6a90c3d5a14a09ee10bcf28d0bfc3bcfbe9fb7

SHA256
d9e07d2189c2126520473ed1048a578a62080fd763b43a06e2631fc2b417ef98

SHA512
b59e7c263a93c0ae96d2b5e940a592f8c1ef2a47516fb6641616ebceecd5f10846da7762978e3d80b231ff97bb97b25f9c9bd07d571c1664d90b35dee5c0c559

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
27KB

MD5
b1ed426677b7065810ba63e3615079e3

SHA1
207f557b999ce871711416525c709134d25f9906

SHA256
51f7b6cc694f8d26bcbd5dbd8283d24e9fb04913646d7973987ce4f7d6ca82dd

SHA512
604c2112315f934585be790fdbe1a38df2ec1e0d0398fc2817c742e27f0960302934f7026936bb21b93e24722c229622252f8b3c365a7926ffead679f7303bde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
40KB

MD5
3051c1e179d84292d3f84a1a0a112c80

SHA1
c11a63236373abfe574f2935a0e7024688b71ccb

SHA256
992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3

SHA512
df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
53KB

MD5
68f0a51fa86985999964ee43de12cdd5

SHA1
bbfc7666be00c560b7394fa0b82b864237a99d8c

SHA256
f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f

SHA512
3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
16KB

MD5
144fc04495ecb8dc94d13a866ab0f3d3

SHA1
c4e4e25b100b08c5777263a99709ec4b74652ed3

SHA256
9ec1bb323a1726e8c749002492e873a76c31ffdb7be05a3043d9a978a2ec8503

SHA512
add788c2c78d5ab09bfe897a52ce20345d72b5def5881f63af77933858da3ac1b21b673b957b657ed4441450e9f710a0dc5a90f2d5438ed668e8cfbfce83bd29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
42KB

MD5
23d5f558755a9d58eef69b2bfc9a5d99

SHA1
fa43092cb330dff8dc6c572cb8703b92286219f6

SHA256
6e5bec69b1c6424972a7f5481ac57049811f0f196535b707613126c11292c5cf

SHA512
9c56c94d059a27dab9f69c9dfd718382a8eb192b8c0ce91cd6db6ec0769b8756acf9c0956a35561474b87d6278b13fbe88a6e4df6260c278b1ae06e9be55dd6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
19KB

MD5
ab7532c8d5e38228215da168e80637af

SHA1
00d5eda03bb3dfe84356d39e2d445d54896c3797

SHA256
20ac4ead3e1e487b273d9a733b36efad29462dbe10644f65ee5a69d8aa971240

SHA512
38d0eb27d49db442b3acc674853becc280979a9d2d34a972cebd61b803e5b8455b4f949ab904079d640911db81706ed23b75f3f36cd3ea5aeb98fd243aecd6cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
32KB

MD5
d3d333f035cba92d124e148e95cf79b4

SHA1
c78f84e852e20f39bc694bf8c7080011a6c57625

SHA256
8b7b5d9471684e08acec0e64d719e919f7ab62f752df7be460aa4eab0ecceb0e

SHA512
d75e98b7a242d2b594485573d00ba16831d5d0d703bc92e9f34832a2483d4f1370c16811a38307f03a93ae3df9b781aede94c02ead06bab751c188c8354c2988

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
50KB

MD5
54dff1d0c5dc6f97802ef6b520b6b039

SHA1
4b97796852c6666153a8d2db475b7f18c0f807e1

SHA256
ba9a685ac77e6a18edabee2e99f7550579ed682d95896599dd2380144a2d3aac

SHA512
7b52820c01797405775c5c7eaa678d00c2ed5192ee1e4d8be2d0202c63d14b5a4fbb37c4a99ed18694e87a6636e7e728b5936b36b66550c9ebb28dfeeeecd16d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
17KB

MD5
663d0d0966d3e0fe61cb9cd631c35c4c

SHA1
d371a2344f891ad2dc585f66eee08f4330634184

SHA256
97577b7db223876f9a048ad8833c7b55726ed464d8e9d34c303c171a6f32d7e2

SHA512
75be36c722dca266a10e3d8003d7b68906e25f369d9009c6778ecf2f3a4074b6c6307e37eafbd5e9cd755c2a850579df765a1d1d7be1caabd17bf0b426a65d24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
16KB

MD5
bd17d16b6e95e4eb8911300c70d546f7

SHA1
847036a00e4e390b67f5c22bf7b531179be344d7

SHA256
9f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352

SHA512
f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
94KB

MD5
fe87159e1bf34bde26ee882153947017

SHA1
cea6b6b5779486e9aaf52245dda9f06aaca9aa0a

SHA256
92ccf3ab7281db1b1e2649b94e6ea8babc5208151f6437f86b40a9902abf4270

SHA512
29ac8cc2ca8c7e69de69f139239ff641f27dfaa4a0ba856d396e394e2951bdd8e2d9c4560e4c602f5f1f2392fd15beecda33ff606e1dc49d4e24818e2cec2103

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
103KB

MD5
c12602b8ebdfd5ea5113f42ee978d526

SHA1
1159db5c354e5c9a73b2e072b3c0c5d02f3ff07b

SHA256
412aad14e7b55e51c4c56a88949c8f5ac81e06bd1d9b23da4378b1d9711a0794

SHA512
00ba76a1f0f08c969a96f4418c158d482eba611fa5984cec234ded9c7a1aa2e9e4dc2a69816c2940783289767212ac729cb7b3ae4cd002f772a5dc5d45bce3db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
142KB

MD5
603a896d3acfcb4082ae2bab2f9ee3b1

SHA1
3c2bb234804fd27a403faef84fc99d662a0fc232

SHA256
ad1170c98c99dfab5c2dc330cfac6423254d6b1cd547ad7bd2915f712fa71701

SHA512
64c163dd9e862fe4fb53eea90a75a4972bcf664f1ef87f5caae0aff19aeaa07654ec89e606371787ce2f0fca2b077454a632dc7c995625ab25c10da2aa5eae1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
20KB

MD5
e36880853b00b66c0ef891574c77b2f4

SHA1
b0801cfa7cc1dd315a99d15ab479769fbcfe909d

SHA256
1079a896b22eb5c4119dbca270c9cb280f73ee0ee303e5b87a6623f2e117d1b4

SHA512
023aaf1837015672d3cceb1efd774eeda9dbd797b68910e9f2c2e24949643fa767f8380c8a089a81aa2abdd977f1ea9294ec20d7d59422c084a1a53ee2932c34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
27KB

MD5
bc7321f62fec1792b4b4b06eb70b55ed

SHA1
1ec07a8dea6ba3e7cfbcfa03fd41e4fbcab88d80

SHA256
4568f3217ad7eca8b87555678b82e4fe003aa5df2c4dd7cd27f469961b3bf303

SHA512
6fb01025e6d815f26047d4f2c0eee18a992ed550b73b4d23733b2d00c70827e1407828986c2fe13f2f08a991dc45e555177199c7f226ac5aed5323bf5436fdd3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
153KB

MD5
1b2731006f2b2597b02859e501bc2d4c

SHA1
118d27a703cef3fb083593a56bbc93e62420f30a

SHA256
59dc184cbc1a318493460d1d78999cfdaaaac9a457b5a3a02c2567dfa17314bd

SHA512
f7452f91afe2fbfcb04f80dc7b051d874224de8790bbc53858678332a6b49f7295a15989a587811e1e8fb58a38625ec3e15657d88a367fd50d5b201d7abbe90c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
139KB

MD5
bb571bf406397e1859d4b33a68ce3c04

SHA1
51ef5990e472585cef9e690f0ad463dd7899bb0f

SHA256
9a26e4068556fc5b2cc30ceb75ab2a50e874489f1b8cdc4feb680e8769ceb320

SHA512
de890fe7e19415408455df3eec39c93b256a2e1e85674434f0eb91f1c9c128f029378e1a53b68b55167d27259ba5dc8cc4cdf6b4e9b322ff2c169b7a2015c36b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
84KB

MD5
c477de9f0d9de5ee2328f501d5b07a9c

SHA1
b96cfd2eb95b28e0988257d20bab5e6b7382842a

SHA256
8b84acf1710b6e96227e18960adef2d034936f08fa1a2daa36ca25356d49c03b

SHA512
55bedb7e7d06f8fae7f2238658b41c04e34dba3fffcff8e6242dbe5f41156454489c3e9f48059b919181d4585546c6c4ae1d95903182fac6c432e99ed6917069

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

Filesize
89KB

MD5
49fe15cbdb28cfddb2eb9728b55a0234

SHA1
872fa13c65f8a94f542378c4a74576d9d713ecbf

SHA256
7e1d76d744a0a8df696e86c6c3bc0751627fabbd35531f412a8502141dc1d371

SHA512
6e7894db819a598d8fc47b4e87df551a1e5764e10980d868ace600840901b06c7da47c16157810acd6b407e875706bd64271c428f44d1dac1a36db1bd5842f8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
20KB

MD5
014a1b0224fa841a945de432dbd13f49

SHA1
d00dd429de3ae8107d2112fdcdf82570fbcaed2d

SHA256
27cdba1a1d6be78c07d329f54a589d05627f6d1645040adf7fa529d76845e43f

SHA512
fe1a949cf7158b1a8e563c10f46f3c3440671d239abc423b37f24804ffbdc694e1b62581199e9dd8bfd180fd2f7bebd0e8e5ab1b4bff2f999fc5716a21918072

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
89KB

MD5
830a3c0d6ed6d821aa924e75aa8a5e32

SHA1
1d0c367a6cf7f5719fae91d29cdff400eeecaa49

SHA256
0edf6554aab5f4efb4e7cf02628a1f73b0905f17f09da09ac08c817d08c95fb3

SHA512
81ab0294e5123bef87aac5233d957f067c0b1d08745e08b2c2b11337ea37459bdc84aa0759fb25393823aae70fe23dc6c846d6eab052a1a23ac3898d6f16019c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
28KB

MD5
a762fb5a64dec4556d980f51ff3060c9

SHA1
6ac0b291cbbd8819e9a922c9c5228f76ad029983

SHA256
cfbdf62609fb4493b45b6b7a9a13c5357ab5e7447c606d9fd707dbca46359a54

SHA512
23169bb323a788ccdb915dac2a8d8c58b018c40941f2c7b10a3814a68b42ad3694d07d23e2eef31d77a7c16da355c98d796b94f82b8f352aa4825ec0c3e08b55

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

Filesize
45KB

MD5
5f339ff8127ea962b8aa3a95709b6ad1

SHA1
340631518650a5f3beef366ee93ea20ceb5da39e

SHA256
b3ff14cf44c5c690b256a05bd28f7f5b193f1b03ae6a6d512dc267ebaa505260

SHA512
65e21ff5cb91fc5221bab0f952d6be06726ed9fc98d5d560b2d1e1bf2d25c3de44b1509a1962e925ab543dbb2d42eeaa7e572f9501d8e35d980e769f30b4d3bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
92KB

MD5
3300b499c6a33be468a853a74c562583

SHA1
2ba587bba175c66b64bb40fc69d7ffcc67924c8e

SHA256
c57e193f866f17657f00e939bf3c174c99eef786adb8d35a878cc9089fc86209

SHA512
05a425d9a40f99a5b5ade93ca4b567703c9bb5877db82b935218ce813a1174da5e6c39acb468f843fbd5d2b5a53cafe7e52576ee4a32dbfba767645e9cb3fbb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

Filesize
124KB

MD5
cd16458646d3a424699ea71dc6d7af7c

SHA1
3c754d8e1b1067cdd2d96e227905357e9329dcb4

SHA256
bbba5c0e7173d446830f242bc381420b0ea09b5ddf681fbe0c0f63c5de3b13db

SHA512
c096814db27cdd567ac7f4a15287d9479c3445f9e9f79ee2fba32929a3ac66bda8342556cb5aa3dac993e533baffa06a464ad2474fecac86a4fb4e0a0802e2e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

Filesize
20KB

MD5
a4f3afc86190a2d47f56664367af370e

SHA1
57613bcb2a288ef2508e847e7ba35d52f2e87de5

SHA256
52fd14eb766bc6676dd81e3bb50a4dad1891bb9a47e38c3ec620aa6c2b487c42

SHA512
bae75c59141ee60ef1fc2c745117fafea3d386b64f2f67c1022909f295228578bfc5e5e49de5a2f2efd57e75affc0a7d09fbee8fa50aadd82aff446773fc690e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

Filesize
67KB

MD5
bcfda9afc202574572f0247968812014

SHA1
80f8af2d5d2f978a3969a56256aace20e893fb3f

SHA256
7c970cd163690addf4a69faf5aea65e7f083ca549f75a66d04a73cb793a00f91

SHA512
508ca6011abb2ec4345c3b80bd89979151fee0a0de851f69b7aa06e69c89f6d8c3b6144f2f4715112c896c5b8a3e3e9cd49b05c9b507602d7f0d6b10061b17bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

Filesize
41KB

MD5
ca9e4686e278b752e1dec522d6830b1f

SHA1
1129a37b84ee4708492f51323c90804bb0dfed64

SHA256
b36086821f07e11041fc44b05d2cafe3fb756633e72b07da453c28bd4735ed26

SHA512
600e5d6e1df68423976b1dcfa99e56cb8b8f5cd008d52482fefb086546256a9822025d75f5b286996b19ee1c7cd254f476abf4de0cf8c6205d9f7d5e49b80671

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

Filesize
20KB

MD5
077e3f0d3dddb018c1e71fd8e46d2244

SHA1
b50954ed5904b533372fe39b032e6a136ca75a7d

SHA256
12ea854aa2a6588219451d4af53fcd368e24b109085062deec4e5b891e059e82

SHA512
f9cb475d16d3e8dedc6ef2feaee4f9bad365a8bb992352163a0a9f4ff9e809bf895fc0ffd59375e60a44e5c5bd1f43217177fb44ffc0cc76cc85e45a612b9b3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

Filesize
20KB

MD5
59ee96aea4061c8a38d2506c4805354c

SHA1
273902cf69f0ac50ad5c654fa14ca8ddc295b99f

SHA256
7c8672db679b72c70317a6edbf0c2311ed3653e1d911376cf232e334ec7eaf4f

SHA512
6ddc4427481f02ee4f3246384671ff8d41d856d8b0e281c651431a2377b16991c5bc3a3fafb5c1f80ccb05f9219cf201f9ec547286940584c0a671dcfbfefa3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

Filesize
18KB

MD5
8eff0b8045fd1959e117f85654ae7770

SHA1
227fee13ceb7c410b5c0bb8000258b6643cb6255

SHA256
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

SHA512
2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

Filesize
18KB

MD5
c83e4437a53d7f849f9d32df3d6b68f3

SHA1
fabea5ad92ed3e2431659b02e7624df30d0c6bbc

SHA256
d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb

SHA512
c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

Filesize
60KB

MD5
64fa5954c534d47c162e7855f8ca8f5d

SHA1
4b01f58fd07b72e3af80779144f0d3990632e62a

SHA256
5956b153c63469f778b53280ccd35624c33625f69e95cf01c25d4f1a4d1ea349

SHA512
e7def3552526a152db7b19858e7ca5795b31bae277ae541f5dc0a4f967e185b8dfd5de46c6b2b67823e0b2751794e27a8af6fcd222a89e2f0d56384dba71f9ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

Filesize
23KB

MD5
448dbc0598a7032839bb727440e3d30f

SHA1
30084902353785c361f7f460519d75afc9b38095

SHA256
440387aed85e4ce7b7e4374fae2e080f2252bce2dc13968e4c9111e6fc8d9345

SHA512
f2b9aba37bdc6f5ed13952a2776dba5b2df92db6e76c3b6b11f6f18ad82f4bdb669072d1ba2dd2595faafff533fc69237227e5db8cbbf01bb325cca81afe3567

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

Filesize
17KB

MD5
7909108e624bb441107d1cb33586b6d3

SHA1
19ea2497a016cf47af1cbcc2babc6c8c0a968e14

SHA256
29f01061a6912c49322951ae13f0e567006c4256f33dc4eee098d996aa4c3cb8

SHA512
02cfbd98fac8ab133d766e40d6714acd8a772e4b28d3786b303ad44884adfa80f4ec6791c681c2cbaf9ad042fb98f196fe68b6fa4a207a0d0e02d5409fd3fefe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008b

Filesize
62KB

MD5
35fe37e08d59a3191e5937bbf348e528

SHA1
64555d7ba585935ad7031b1dcd85e32d665c5e19

SHA256
e0050b274222e7bbe0d963be219a27e4a47fddcf1a72da32f744a04eccf91615

SHA512
ef3b2acc746dc86ce4e9d075c133e0b65277c14c6347526e25ad5ede7a0f9403478a5fc6a2a19babea02012b5770de1b7484e68c1dec64502d362f8197289f93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008c

Filesize
31KB

MD5
00bd4556d9672009a7cce0eb5605fd1d

SHA1
e6aa062aa34cd745dbaa2b0fb851511a5ea734dc

SHA256
11e4340eefdc92053fa38149176a0c17f55472b8fd3897426a76050aedcb8621

SHA512
34f87481e0cfbab27750b392d885092bcd6e11796745b5ef7f39e9564b8d29d169cf8d72795e45745c366c18057d02120726951d2729c699bc60e6518499536e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000165

Filesize
18KB

MD5
115c2d84727b41da5e9b4394887a8c40

SHA1
44f495a7f32620e51acca2e78f7e0615cb305781

SHA256
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

SHA512
00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000166

Filesize
35KB

MD5
7c702451150c376ff54a34249bceb819

SHA1
3ab4dc2f57c0fd141456c1cbe24f112adf3710e2

SHA256
77d21084014dcb10980c296e583371786b3886f5814d8357127f36f8c6045583

SHA512
9f1a79e93775dc5bd4aa9749387d5fa8ef55037ccda425039fe68a5634bb682656a9ed4b6940e15226f370e0111878ecd6ec357d55c4720f97a97e58ece78d59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000184

Filesize
30KB

MD5
879a4377f9e417a29815b6ab478d2f22

SHA1
b1fb7d22f79df1f2bf8c0e8d6065fb6fc1cf33db

SHA256
ae00c9173e586ecb200caf81c7c3994e5865989569bbf2e63e9cdc0d107850ee

SHA512
e6c7314ca86b94ba31295d94e7233fa496d731756af93f2368078bc703c6f7184efbf9b2e9e0b21e586b3434e62226c35668a146391bea0f99be8db1e5986995

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00018f

Filesize
104KB

MD5
3ae390befec3135386d42cb7999f27c6

SHA1
b2bfefb8887f58efb4add4da1e1397bdf9fdd2ad

SHA256
076e3515d34e69fd4748131049c6bfd342cb71bb1d6b6938a8020bc14e793519

SHA512
6454f0dfad5abb9c8560878f07eadeeab29a83f416477b3ba0f55c9de35fd6920b08edc45efe9d2ad7f5c4c09a766b9affcf5573d8a23262f0f00594e6159f11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000190

Filesize
95KB

MD5
31f4c0c8849089eec1dc7b98197c2b69

SHA1
859c2cb985537508af7497cc24f1401a4940b72a

SHA256
157e47d8c6e02dac726409138ead45f779fe7e36e4916ba39a1826dc0363ec68

SHA512
4d17defae59c611b80d41fc787bc55a938a6e640133831339b47c598f5d1378ed945c214e8e7bf1efc3671c119ef96ad10e9a68cbbc9305a532e40d79517b84a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000191

Filesize
102KB

MD5
96a17959ec1cc3f4226253254d2b283b

SHA1
6bf1482fcbbf22345ae25d5a2a2188cdd979d52a

SHA256
2ff430636da93e2e615e9d26469d5e30810eebb7632dfc9a4c4641b13ff3a896

SHA512
d8a873c79bc5373544bef6e5a93e1caac9dce0bcc479d0a527d970e57d235269ead4624cd4d6cfe9cc24b6fd640ff42b3bf50901ec7d1af8ec6342bc4d1e657b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000197

Filesize
31KB

MD5
d2df6bc998ab0eeec303d09b6eff6e74

SHA1
77cc7b7973073804896b0623112c272237170135

SHA256
b9fd7baafe8fd0126021b66b8cd55652dbba65c10b55a01d846c9501d9f3c6ad

SHA512
e4dd88761b8d6e99b464f8b90c2070af950b873839c62a7b35b59fe0f8736cb25aaf1829e23eff6d11e6f3cdaba6069a748b4371625fa10c53ae7076b1ff0f47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00019e

Filesize
47KB

MD5
015c126a3520c9a8f6a27979d0266e96

SHA1
2acf956561d44434a6d84204670cf849d3215d5f

SHA256
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

SHA512
02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

Filesize
2KB

MD5
b47be33f14171f95c26bf1fab7cf3644

SHA1
0660d59e0af33a62e192a0eb9c008fa777dfd1f2

SHA256
9b39d48ff84bf3993beb1bcf9f2cc399f3cfd22553428124601b58363d995cca

SHA512
36b4413b726b5fd69113d5d7c2feb8130884fdcbae1b36a67017396add55f1d8603397426956c530bb810ea5d19aa8cea7c981fc74909c8e7759e07130b31b24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ccce0421b8ee365_0

Filesize
4KB

MD5
f6a9a85f9c14035f443741fb6c2f18ca

SHA1
fc23d4e7d8f2beb5815f0d8a8c554d7bfa2d88db

SHA256
95f233b965af967c385c989a3714950a466b2ca6302d311f5df4a74851da20f3

SHA512
09eb7f46d7a03d26d7559c00641bc2867f9ee264ca70a3f2c18fbd7493815e482155709e9520a6cba5414c76f0df7ab1fb80944c499949976493221a145a7175

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

Filesize
1KB

MD5
2636457657b3812201d3a09c195a87f6

SHA1
0531865ce916600d50c8d2c702923883d170aa88

SHA256
e7cdf58ffcf302a584613f748508b7d441c715cd1bd63a75b551b736c483e7e1

SHA512
8b1361f91b147d8c5ea40dfbcb684fc35405c67e07116e37e9a9aead3074a068fa0b8b76db02cc487046b5c7904e628bd2bb8fc72e5f42d02786caee4dea2236

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f4680e8f8f8a14f_0

Filesize
9KB

MD5
e0751491589dbe296c3c41b53879a2e2

SHA1
0f071745591024c56f95c82491d86633523dab48

SHA256
05bf109560c37ad498ce69b7ef67cca890fe61f98b44b008223208c8f02f2bc1

SHA512
a118143043949e8db454a3cc015f3caab46b75d6894905aa74d89ae8632d4b0dd65e583c0be7d89a7b473eed70e83df4e18246d82520467711dd90c6273aaef2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37afe38eb817b647_0

Filesize
27KB

MD5
80d87c8cf63b9ffae4fd1b59d9ba3f85

SHA1
7ee8c74ae2f1ecdb05b64e6122a6fd9f8579ffab

SHA256
f76d91465ecda3d9c231b5293de74a776a465126cf10fd87aec4950d9d731bbc

SHA512
b8255f3850df37e0a3f4668b01d6f4c2a698be6b39db7a74795044e248824ab6c1c18baa55e7a62ca766e4107d42c52843bafea55dbe49c8ea9b85fb47cfb098

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a4259a0181983ba_0

Filesize
6KB

MD5
309fee228e626e28c3771ee68f7d18e3

SHA1
a1b4684f14bc7558ae69e0dcf843d41183a604d5

SHA256
b2987d0c5976c322d4865ee27f6978495729e1161c013e25f9f1693b598be1a1

SHA512
86eb5e15cdca55409aeca68454b2807795af6760e2a41d8450de74d8d8ab80f1074eb705f57df0228f42734eecab5c170d843c8cda4d9b9315d3485c1df9b664

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f139f229e6f0497_0

Filesize
5KB

MD5
6ce9bbd9c92f64a83d7278ac067c41b1

SHA1
95c97cdf5992d7f527113ce3669fbd28c4d0f409

SHA256
8ae9036e48f911f77d921baf73094b9c6c27f49ffb8624ce9f7fe410b6c4cf8a

SHA512
466e42b83e8731ec79e94d3a27b35b6d1dfcfe1f0ed6d457f96cbebc4f0aa3df94c289ff3c30677035f221ed4f6a7425840edaae1d57e53af4866d1ffeca6837

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\406a4590c345a64a_0

Filesize
175KB

MD5
85d702b0786d5b3c5039faa44a1265dc

SHA1
8e3240d351279fc4dec28c54dcf9cc67ea19c4ed

SHA256
c927c0970b9403ecf436d50566f7b974375b9f9443e33134f08a802882152742

SHA512
9546e8b410e2e8a1f182f2e27a73e6d5e152ce0b101827f04339e942c1bc3b40a99528582fc92723758eaa228917095464fe6fee503331cca35ccca8332fdb37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40b0b85ecb5494c0_0

Filesize
289KB

MD5
634b0715f3c880c08b6f045980617571

SHA1
48c3974a6a4cdac42720a2686f1498e4f86d6ba0

SHA256
cf30046184062dc4c2181ed935863262fc344c853c0682b90a959e6bfd03f1ee

SHA512
e1dfc9e0b46a342c9245029aa8678c3095b107a8d0c98e27f30354d6ae9fac567e07476c7e13147021bfbdee3b7cd05a6882ec0373c7b50f9e7d84a9553a7c65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

Filesize
1KB

MD5
826250c7e65c549e85387851e7905de1

SHA1
eebf4020205486af231eda416cb743e7a39dc56b

SHA256
c7e365f48f9750b193209800f80ee4745d8520e5e2aadcd412c1846f57b8eefe

SHA512
66b9535a5311d52ea3224e9deb51a4eb82d1662d46055cd5bcbad73a5c5336d425fee978b4c1a823493e4b73bf326bab214d1afe0bdac8bc8aaa4bceecd38859

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

Filesize
2KB

MD5
d94b9c740eb673058b0a8d4bcd653ec9

SHA1
eb37717a274e847f7da9575517e35119bae98408

SHA256
8cf2f48a7c9232a1e2475c184bacc30a910ca355209a583765dfc58c49f065b4

SHA512
8e730f09dc20c1176f51a4ed342ea87e5069ef0f33d0c608ee7bc97a741515d284fd3ecf6937b5bafb66bcb3e75c2ce4e7a3b3f6fbed9c6c113ffa29804e5d44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dd1e579c9681f95_0

Filesize
2KB

MD5
451fa003973e18e4e85f81cabc1a11da

SHA1
91499468aa5de995e235e25b5400ae44ceb46bb4

SHA256
2c6d952ea47d7225cced587f7dd98dd53a1db7aea5fb4fe9ea3472cb69523c6e

SHA512
0d9ae75200ad5ce114a72d0ad00cab92a975231f916e56ba0f8738b46910cf86491f1629667d96b7fe18c7613f5620aaae20e6a8d85bd45dc3e1aa4d7a62a4a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\61a0b4d20ae0e222_0

Filesize
4KB

MD5
cd5ea556d889b882447566dc1c243496

SHA1
2b3f91ce685d0e6b397b77d33be4d410aee8f3cb

SHA256
fbfd2daa1ba6d25523c60d6c8702577fd33eb3624a60a9cb1d06b77425a8d648

SHA512
3be6b014f11ad7b40bfc9c8485fa9374f008cc7def78e00c43af2e24808f6d68fb780d0e29f31c4d3d1933cc5c851e651a706f40117e5d68f66f992ee33b2a78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71d68e68ea4089fe_0

Filesize
5KB

MD5
c5e42aa2d912fb57a0366fc0a3fe58f5

SHA1
150132a74818a4d7fb425883c135ca2abe829621

SHA256
bc858876b3d164c2c861f3bf3c43e900738aa1ae209a1d13fa14c95498fd1f87

SHA512
8240fd34aeebad3bf33359e30f3f3d1b1e6a2fb8b4a15ddc3db7b98f0ae2e551a45b1247def113de4ee518865299639cde35d5c0089577b26f13bab906955025

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

Filesize
1KB

MD5
3c1612cbcf61aba9bba1472fabf99527

SHA1
218cc8d7c20ae19cde06f002ccd92637159e5182

SHA256
c0fda242d2f35413a6c77d0ded77cc6f2799a387bd260b8f62454a1c4a6e2ed7

SHA512
5c5d13358550ef7d4aea6624a2ee559f21e46de897b640da6d3e4180d80c2ef0f1f5b0642d245a12160b1b39160387b6298a691d102eaae937f6de49b92be6ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\766094f4b47e839c_0

Filesize
9KB

MD5
a73fefaa9c05bcbcdf650e1458325720

SHA1
5c262aedde9bca7dc30e2e6b877690191b40854d

SHA256
56ed6b69916c0ce23d5d6c3c8d0c15b9d3849dc5c6bc1ae8aedbbb7e029dfbc8

SHA512
ee32e44b8a85b4e5621dbab0d045ff6b77e5e0c779bd314ca66c9ed9e16e91db1ff321dcdd2c16c6326927927e24abd3e983ceaf0373fb634c2b75465027509a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\86b9cbd77d05d034_0

Filesize
6KB

MD5
3df7b1b16f377fd45995e23e7a42db82

SHA1
a0b9a8694b9f633c730a4de1614a1f9d70e4bd26

SHA256
970de1f16a42697035099d10fb0feab1bd14e4c13f583c0573e7b0a1221bcf37

SHA512
41e98ce994bd7f853fa784c0fa08b558ce16d8a177b73a02969b5397ecb56be2b4f58424609fa7896e1e447a70e0357f3047e2bf98527993630ae7c50426f5d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

Filesize
1KB

MD5
71b975b0f42a891fff9aa95bb3e98552

SHA1
a5f0895ea36b47be258e363f7ad603d5d82271c5

SHA256
432e5b683d3987824a0b35a5d1ef14bb86635d2083f41c4f906a36d9749cc13c

SHA512
7281b56ccfb67a69e885b60d020db6bf1f48f3306f1541866dab3c1841e77e095807829854fc4c35f665cc795d3b730ef2072be94d8289c35d9252203abf7fca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90d7d7591a1b39bb_0

Filesize
262B

MD5
7e8d85b2816011bbf2ec9bac5b27e97d

SHA1
2620b9188813dfe2ad63355bcaee8ae13bd64081

SHA256
ca9165b82ede92fb446cf4e543d2f2db838bbdb8f82c9afabf8f9d965c807a37

SHA512
5b4401f280a08f013e73e2a3fb9c89e6c6bca59ee1154faa4277287e19c903bc2467ac0f9dff2b7a1d4fc3ff735022ecaa69d09f466e302c3795b2e1ba4fd92e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\96bc766215a93e35_0

Filesize
1KB

MD5
07f280b1f6844d862f3214bfd9d3e76b

SHA1
fae7ebb716e751fb5c127912ad17c5eb95215841

SHA256
4a4cc49924bd9f0b3c272a11723a4558b5dbefcc51cee223ac247d6d8b407130

SHA512
c3999cfc9a48a58b3dd477a403d86983a468ad74c2c073c3e89cbf34e8a8a2219239e0d8cd1f6d534800636cd4b94808cce35d07fbd85c8f9757e0a92786c4f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9dbb949d27873cbc_0

Filesize
2KB

MD5
faaf14803bf12a1e4a39758fcfde2aff

SHA1
59720c5d2b6c837eba220e3bb5511611ef7127bd

SHA256
b7d80dbc1ee0a3ce1de4691d4d5bb49d1d55b354dc9ee158aa77f900b4a26e91

SHA512
47ddd4280fca5d8e65b6ad17e15cf5efd6824202447bc5d924c452a0592f79c21d359735c9dd825ab513c2e30cd528539428f33d3970e2d4ea036245dc417379

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d693ac0f52716b_0

Filesize
3KB

MD5
3abbde17e45cbb9cdc1827f2564dd166

SHA1
2aa1f918253f7b5e1052ab2fbf722f392dbd85b9

SHA256
a2af95e74997d72e5a0d9789637957d50231895227a0a3249a82deefc761b282

SHA512
f393cc7e1f6e10f6652d3f81db1b412eb9de248acbf711fdccb206ea37b9950f28bacc57e7af1e2b278e927504bb4c5fc806b71302b63458a5c534c71a02edcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b3507d057e41d34d_0

Filesize
342KB

MD5
d9d987968ae2ca48d49b7b83d1b9aa36

SHA1
6a7ddb768ba8d1f4d89cdb27f5c637f156b368d1

SHA256
33fcd099e1dd729219842e8e38216eb85e6ae61066b705ef66afb252fdee7896

SHA512
edcb7673b5835766bc22f2ff2eac153c8a7686a41255e4eb7fdecf49c919c8774aaeb1aa31abaf9073ff7c84889d893fec1382d79b27f35528c78ac984cd3492

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b3e82669a81c981d_0

Filesize
2KB

MD5
f91589eefea76c81395260e769dc5b38

SHA1
8529122175a58ef74485dac5347e1c2cf25ec262

SHA256
f968c04e9f3a5ee604dd793af00974e22f27fb590186c0ac7c6560f97f185b0c

SHA512
c09db473d9798d54ec509482733a09de9568cbbbc95884d44493464cfd923ebc15067f53d5e6d55023dd3db7bab6bcdc81666a4b4c5fd6fc990df3dfeef99a3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bbfea718d84779c3_0

Filesize
14KB

MD5
6184db1d0de41e9e5aec50dabf6d3b96

SHA1
fbc3fc892080f6f90dda6150697d3fc74eaa84c8

SHA256
db7ebbb12a906f2af6ec3ab65d15897aeb5f601718bdb5395004f25b761d00c0

SHA512
7964d845353592093fcaf5b1cea9dbf5644af8389208b129a452360b6c053de9d68020b4febaee4755a2479f35ad767c7fd82bcbb1ecc38832de06c745a1075f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\be6d12311ce2b399_0

Filesize
1KB

MD5
2acf90c4a7c9e3bf578781f07674c788

SHA1
db0082637d60892bb4bf99fa92eb8c8f9a4f0eb6

SHA256
3b30927b97be11c33fa15b76d531e5b0dda380040891eaf3da49d63e44916043

SHA512
e57ec82481e3058cad9aedbb8ce31006922c8b8fbdf66cfab3c313aff96b8f6927cd228d437bedeb3c50490842ce03f797b6a48e2e9055ab7df0b1162d23de0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c91c845c83814759_0

Filesize
14KB

MD5
1267f2e3ab71d6b931a293d48c17ebe7

SHA1
b1e04add1856d366b8e4ba244788bbbc66ba9a2b

SHA256
922d89d33243892df71142da73e4ea98fd654b38e1fb29e8c7e7752755f1415e

SHA512
b23590aa5656690cc6236153301e60c241c22d41a81ec11d7e753469f03c96e195af49948ea9333b98c26ea6133b99f8b127cdba4a17d00b6b4b8bbfc148d55c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d2f9a2fc02c20de3_0

Filesize
2KB

MD5
5485b107b9984fb34d280b2acea6b8a1

SHA1
972d363a469a41e5b1a013f083578f1d6703c956

SHA256
fffd6e4aa2053f8f583d7eb99e4990ab225b04bc526907a458a60609d28dc2af

SHA512
27291e4ad0273aac66de3968f5df5de9ea2f42c8ee04347714a8e6c41179216b09215285018eeb8f59e8598e86d7302fdba4c4e6ba457a29b758de0e1d8b7c8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d79e0a2891fc014a_0

Filesize
262B

MD5
8441bdd2101ddcae8ab77af5d643ce8c

SHA1
25545f39286af0a27191de82e39bd3e9e2467437

SHA256
755173acc72bbc5a7a97a8aeaebf120408f3e024f0313ee1580564f5e5c68786

SHA512
91b10a65b81e1452aa090621626ce5602dc5a741ba73bd857b80d1bcd9ad808f90149ab135abe95d294cafb4ac9281dbb64732f8a19d8fd81943b46474ff1296

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9c7e700cc3e33cf_0

Filesize
47KB

MD5
6d7316925edaf3136ca3666adfaff3cb

SHA1
44412ec21f0c7188bbaddc76f8e29b366e396b42

SHA256
b487d47e24f1b53b55a507ae3092867b496f6224daa080a4f9edd2502919909d

SHA512
8771bb59995ce36b20da36408a1ce5135f86896bddd13f1476335095bb8bac4d486bb04a7ff4f8494d77302a1b49420541f0376769d7237b06a769f7631cace8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

Filesize
2KB

MD5
175984c7a1ec49d4e5cee3cac16610ba

SHA1
892203c44788511404c678141aa8975112fe7753

SHA256
fed2c3b97e3aee95aedbded0f2c5f00de5c6755d5c5d6c72f7b13892296bfab2

SHA512
15ec0e2fd374d6b930685adf29b5234b22960cd663ac1a3eeb724c8786f85f97b3583b9d723cba68e337d256ccc1168c279b9fc9c81f02925bfc9b166883118e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f3ae0d23e488645b_0

Filesize
289B

MD5
c01ac0805604409675a252edd7299ed1

SHA1
13ceca49ac5f86e86f6ac49dba63f3f5c235746f

SHA256
ca2a6be6808bd03ce9922644ceaef6ce3372862a7e1247a3fe8a190fe3fb6142

SHA512
ef34a1f12907bec8fc10e774f82e83d280478c9124f65a2ef9a14274331da87d5b846d16d6b77094c462c0240c53ddf841061e2af620d2ec716dcda1da8dab38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
11KB

MD5
2d289b1898f9ab7870e162cb54e955bb

SHA1
dc305d34a32c4543390f2282847a99e2f92e0091

SHA256
98ade92a82284b16f7876545a4e83c764b4c1198f1e399551905fb33516a97c5

SHA512
f7bc8d81a7467fe4213c7918ac2355513733c59004a6d02e4638371e60b81c3044b8726c78c4f0ec35c557104f21e0a9498c2764bd46af8c7fe79becd1818d8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
12KB

MD5
63284c7d6a60db8c23740b651318d539

SHA1
c4ebb123db918dc26cde5f2f6c397bebec36a1b9

SHA256
0ecb9aec65cf032864d3f5af83cee94845a128601ebcec9a2c9cd5393da78203

SHA512
200ea1d1614ad335005f8b9679dbec8baa5b93221f03d7a6aa08ff6aa9f8eb6849d10dcae3b27956f0ac76816838a34e9aad590e4c7ba08f9e5b8fdf4d2d716b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
ec7f3a9068bf90129a11e652063f3f04

SHA1
b1fea802b9de50b6155b8bf0b9849a6a68c2dc58

SHA256
fc5595ccdd75da3f505ad7d02f32c2ed66446f3e6366df5688986ce3af44fee0

SHA512
d2c9dc08848d68c3355ee3d8f0093887bad2f1d47567486966eaa068561924a3f3d3b3f6763e5dda6df5c171845706e8693b0a8ffcbd865c0ec766ac455dd437

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
12KB

MD5
a63865ada9c8b92cf426beaef7089103

SHA1
d9db555fdf66577116fa6e7a2db756252e357e5e

SHA256
c08a243a7ccde4d914e94c11c26f342e6acb0f0f71766f8482da9df78ef7e9e9

SHA512
82f6275a1c3918339c38ee078cec830619fbab051285a5971c9939a3fff20e1929aab8df6b921045248c90c7dff4cfea4fa19246939200208e0a639a8a3d252f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
9KB

MD5
116ff6b961f3f5f37b5d9168529a2bab

SHA1
6e7fad22a3fa0ad3512617a8203c30034661bcc7

SHA256
bd1e5e476641653be1e4a7f66e26951cd206918dae8208d57aa00719f09c6d42

SHA512
83c04a6fbf738790cc60a1d4792f104745736a72a7d79d21e25bea59300b249e60c5c2b505d404843270f47a365a19f3610abb02781846a87459aa4522eaa0e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
13KB

MD5
f2fa3332e0e377eaa7aab5152c0d6431

SHA1
e44442ebb79774a5115d987b70f6a12faa1b1512

SHA256
d90dacf3a6645da961bcdf7c8b0bc889a241da6ecf3c8ac736be354be448a37d

SHA512
eed394f33849763e911b6de84051a031a8a2430bb0c50928e1699ea94f3f79196a26e56eeb90bf3b999849ce1ef2787f97e8431b281e906d881f2b9e5da85daf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
8KB

MD5
ca95f0e8612f6027724eb9df70aa0567

SHA1
829cdd9cd84d4c4360cf75e7acae7ccbcf254463

SHA256
8dd64857b2b714c7fd9e3c0fa406a0e98be4fc331fceb7895bb76d766a08509d

SHA512
5295ca050c5931deea8484f17fe51fcab4e00c03ac635b86db5caac8b36aa8e37fe17ecb43484470385d428da81ec835a66d74f4338b30619a1426a4cad790ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
18KB

MD5
ca787b946519b635bb13d0299280902a

SHA1
35fda952819319b9810e4c9cb6b8d3b42822c915

SHA256
bce0a059e7da1e394f71383b05e8f62556d1965c33c1e2d3ca0de409e70579b8

SHA512
dae4e3b045b3245129b4bab9f92d87a2dedf8b2e4c7f8f4c5814162603386ef8ea147f658110fb188cb070427b3f7b4e79fe1c1d7dd1625f4a775697c0720e6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
20KB

MD5
e0ab64f0585471a8a39ea2777a860a18

SHA1
495aef223cbbd65afe740bcd7e95155a70b36773

SHA256
0924ae855619193910327f984e977837ca94f3c7f54e363883d9dbc800c57990

SHA512
e3bfd8f59d5f0fee6bfeb6848227c6d0d81e2167911a489a933f98ba86582029af539be37f530277941148a2fc282c10e9bd01a8e87cd9796d42422e80d1a12c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
823B

MD5
f0f603ed0c4f4d8e9e7e27d3d9f514a1

SHA1
248359beb907e6830314eacf3e37ecc97482704b

SHA256
344515775ae06bb396a79538cb61bca85cc75a346867d7675c73cc34e194715b

SHA512
4a5523f067737b3bfab2f8b0d02d7fb9bb1f1af1341f4316e3b1f3aed8611055ac97427547f657c713593346eb44a27e5a61ea3b330d13a8f3e7919fa1d5bb07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d2c18acca1779a509f2968c7aa32b2bb

SHA1
122b8231126088c58c8137971b5d9708e0683173

SHA256
e70f8192f357c017820028783d5b7f4a797a6e785facaf719637ffaef3fa2a5a

SHA512
078f755d454f21a75294f6c8906c8f689432227beb474d6d6fe3b5d3673d0cc7e57f301d38b8b1b47366da9235af9a452c552e7956bc0cfa43d9c5d8827f6c02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0e1bde802fa9c704c8d02774127b013f

SHA1
e8c1079ed39401c8686ff48e7ce5cf9ce70697bb

SHA256
242154ef3bcef81e3b8c068f26c2a4210a7af0029693cfa5066c8146a213c99d

SHA512
19f695137c006f4239e67bcc5db42f173943f6ba7e605a2912e7b657f2e90cba199b73e220717dddd0c59b16bb792386a4e4b7f35077c8b3e8a4e212a39a1f40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
0afc885e90eb8a2d3f3b4014f091e545

SHA1
3e6dbcffa52efdd6ed3da8c4c1a274c5d8d633f1

SHA256
98b6fb4eca385b019f071a47ca9cf8309e298c110bbfd36de84ac2d8e065d0ea

SHA512
8a91bee52b5d75bcd1b49fa450c1618c211831edc79b0f99bbeedbd22b7d8a4bc1b4c7b40d8f11178c6a210ec6ff50e07cce3dfc6db4db1daf7397c66b2d42a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
24KB

MD5
90a144cd6020963f84638de40490f51e

SHA1
e67ed01a8751007543a9afc2220d65c4a85d0c5b

SHA256
0cbe2bb6e4bf42a27eb2b78ee8fe64d6e03407b832473d04d6eb91258d6c6bce

SHA512
be61c5d2b4840ae342f01d16fdc8b3414cf4a8fb7fa889bb576da62fa093d1d63dd07e6c713145f98dccf8cd994d8b7c53e02b6645432c153030a0e352a23285

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
24KB

MD5
780ac374514c3b614017b2ac60328cf1

SHA1
084858a5eda5ad83a18173efe93a0948d4f83727

SHA256
e7c6c97f890f7f9a9291d33b1e6acf93d051ed51f142233e4ca784f4ce0fca1e

SHA512
7684511361c6d71b228c7a07d1f6ef0dcb76f0b68fedc58169157c392e631c9d9566aa38308762394d4adaa222a140b1cb9a53a43867dbf989d0cb513d7a8b92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
15KB

MD5
2fde79223ca5c821ae488c1b959f3dc9

SHA1
a35a90455f4cb7608c8657e86801466f73911027

SHA256
4c6b23cf8d96779e51e4ff6b7cf4ec044e5bf1f1a4260066d4ad17f769675b37

SHA512
81025d99587e49be726fae0cbae06c5457455e7fc6d4b0148ec95e7a1e56fd975624a0a70e5c2d7dc8745a86bb1152ba3205930ffd1e0c92635de286b66bd616

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
6f2a215ada38b8ed1f2dddcb82588294

SHA1
835c9b8573683c8ccbda0d89d60e378fac85f99a

SHA256
1a02e087a48ef8095bdf532028e8a93c4fe437eb057022f47c14d74d031ccff0

SHA512
064dd55c4721a6b04a21c8bff0ae8ede7e899cfa3618e827305daca72e7b81f47d11c16f6bf84b22e66ce37c5726813744ad94147a3d1ceb0029b1e24a4889dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
4745a8e29b686d580170518b19881f1a

SHA1
40cdcbf3043c00222751e1f4b2ddfa16b46fcdd7

SHA256
651fa8c626f7475a22af36a4598b3f79f7bf485c5e44d2a9dedb251c2b9ecbb2

SHA512
8e97423bb8acc249666edf30144081f772bd82ca689be3e10aeb1ec22b452da4d278d5320f723ea535aab9d3fd43fe7d2f9e454e85d62e9fec7e1ff444c1d8b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
92f3b1d3fb2f0fef28083ea728701942

SHA1
2523e39a6c05a474f97d15d58034f9a14851fe99

SHA256
6a21755deaccd4874778848a1637515fd2189ef07224bef61cbb348967b92d5f

SHA512
17c00e71c3a0b3f318755b5ea6c4151e2264da97079788143bac069cd0146a76600c9c03e09aa74b978aece60de86020e1f57a207a45da0226544febcb6d3922

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
25KB

MD5
4d6cccb224507a45e4195db52f49815f

SHA1
4172966357793d6c3b5515ff7541768f42516274

SHA256
c8aec784fe5cf42400fb8511a45acaa68dc36efb47865fd483f2d4cb14d6ee3a

SHA512
57f58509a9b10d7f1aa390cfbe49c2152167fe4ac06339b8205455f2a9bb8d64801e552d87241de3e17531bef75b2fe465454fd203353f6d0dd5806e93295839

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
a93311cfd584558214c34d969eee53e1

SHA1
4eed70f1047cb3cf32ca0e385f28424b81d6c12d

SHA256
daec72902cbd25b21e6677c9389c8b60ab3617eca3a5bcd890243fcf9ba792c0

SHA512
e48b4a75d33f6411bf50a50adeb1fef5343c274507dc30fd7f2a8d627ada99479d4c2c0de01c011477d61da15d48105cb0fb000974dbba640c0fdb18e3b267f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
d34dc6a7aade933cb1ee1888ac3467bc

SHA1
4f4607fc9e1727fedbaee805934ec91e92191650

SHA256
cae38d2d1fa50c3c7c2a0c1897f282c0087f442c4cc202d53d3f809736928355

SHA512
3450a289464be2b75e5c89fd6418943563516797ea314679b9cdb489ade91a6e318e02028c20b9a9e8ff46a7aed485d1288c9dbee3e6c5a71e51ab3f733af05b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
bdec668ce4f64340d6009d2460ffcfaa

SHA1
5f4796b1b346f739b06a6009dc99cacd9e2ca8c8

SHA256
b5518e513aa62146fbc2c08f44f79305133598c7713f60dd6457b455f5c94a9c

SHA512
ed6665be259e9ffc259f149d9f1975ec5fcd86f0780eed9a4cf931cf7c45735bd57a99fddbf9302f70c57efdc47c9f733f5a7f88dbad4a01b829f1fc7cc3b4dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
9b266586ce049bafb1ed9e2ea3f7640d

SHA1
e0fe26c5533226d1a569532a20fff9af653d694e

SHA256
b92bf1e734708699861ab4e044c4bdbb5382c93558426110ebc8d01047093ea2

SHA512
4b7f33ecc9da0e97c91160527cf1e29f70a6a1223fa9867c5e4f22dc9d8c969b2603180b8d24dd421ef4d8129c70f226106ff906df6ae9d7fe38b620d44939d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
439631aabdb8c1b15978f044c179f24e

SHA1
69591dd8fe348b48cfad844ac4792be73c631b6d

SHA256
05d78cae4b68a30f8352ee3874fb488d9ea51386c731c1787763a81d291ee93a

SHA512
250747c6d8fc1c8920078cec421611822c6cb802f78fcc0fbfeb4c171fb93887ee6f269127f1b5410725ad9f80a53690d159e3daacef8cf02057ab9541da4809

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
21KB

MD5
8ef9d9f26cf2287695fbb56001737e70

SHA1
c5c26cd51b5f44f65791e8fe9e2425416cab8685

SHA256
d297fd92462e05c84fba06517b0ad2228972c2841114d78d4c240c91881c8dda

SHA512
78e29ab011551536c975979558344e5fe15cba703d821f1c0e9ed04f934b16c8bb11fc8069f59a5b0781e0da77d9259710a0f567dca5da1de9626342f4325b3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
9daf9f78cbf079cfe7b91b355f98b833

SHA1
12995a56c29fb43a297417ec23abf1c02f6cb1a3

SHA256
9a4037bc150f884bc8034f7bd3365fa94c13d6e43a805e69b58b5bced00140ff

SHA512
bf122a1f7afd0080b9657b14e4c5e5ebd8979efec6f50d0eaa4ea029204acfe439fe6ca858a2c9967a830bb612ebfb61eccb3bcc900a610921880aeb9b2dd54b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
25KB

MD5
2e377a902c3ebce72c70c4b08684a415

SHA1
d1d0e92baee32d41d0fa2262abf404264a5669da

SHA256
51b5b25c32a394b2f2cee2ecdfd9c03a8da4b1c746999e99e62747fbe62f7869

SHA512
1a5c533a9c31cf4d6c754ab6f0e84f89ecd9ca6e7944bb91f7ba9a0a6b2d577e1da4c504aca7b92ddfb75cfe8e7b4d547b00c4c4bce8fb7af86d663fa3015472

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
c54871ae95747d5a2a67ebd89918889c

SHA1
4bd778571124d51d990595fb676783976c52897d

SHA256
de2c4fac93120e6afdde450db0afa6eab7a667366f136d6d655d74936dc10fff

SHA512
98279f30408ef9ba59e10480dbb33f933393908c0e34169c9f29405c0d62eda27c4421e3371294854525045c3d3b71f1445a134a3258180bac9e19b6d42712af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
40956a66dde472633c1cfd59a90e2431

SHA1
9ed7b761acc35c3de52e2e3692414be42e17a26d

SHA256
abfac574a2c642d92a81af678234bd7fc886e596a8763bbd7defd0094c0779e2

SHA512
475aabaca42c953531a9ae690c56662b79763349a962bc411982ce3138dd5bf53ee08de3c70aa2df2079a95365769658e5c73caeeaa81dc7be57f46f3f43af6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
25KB

MD5
36caaea79a4e20948528ca05756c2a4d

SHA1
5e04fc90d47a5a28778571f41f979cef6245846c

SHA256
6898bf20571b9bcece8e01140eafd92457d148e554c2b12ef7258e02daad0027

SHA512
091257af5b4cde2d16547d7bdeb5853942b9ed2283b7b240739c6792c9a60463d58d75656a21b4a2cb3bf49ce67cc0b7d2ba29b7e0548ad54103cefe6562e424

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
46edd199da4edda48143149e29c0274c

SHA1
719483a56a9c7b4cf4f660ebc659c7127f94f8a0

SHA256
3490e438f87f20275a6b285af8242a5874d9a7ab4a5636255ea2b8c624ac7ade

SHA512
09114f3b8d013eb446650079f9090c91c2b1baf570852f18ec3f9720eba02657a95c303d0ff33c04cae47c7da7f8b7dc403beb0d5750c3e884320366fdc3e820

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
bc81eb26714be2712244a2594796ed49

SHA1
3b18c6873cf5a28d85347308e776d81eef3ee51d

SHA256
cb8eaf38f7e510f8b8340a3016242ad9a75c969119ab9bfebde9299aa92bfca7

SHA512
83b2d0291294ec05d76d0a04ce75b1267612999bbe5b199fcba81f0e3fac72f20a9ae80d039963e2d3273167e8ca934bc23c447c373b87b919cb0a895708f72b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\61469f3c-4cec-44f1-910f-e80497deb951\index-dir\the-real-index

Filesize
1KB

MD5
463516a92695f8cb79a2702a7f4ebfae

SHA1
14332e2b990a458d4eb9b1786df887648eed3b90

SHA256
77f4228e8fd108bdad12ad60f0209169ee745b811f28562ed438d97b98dbe074

SHA512
e5215729ea2a63f71d41725f86ca4ffc8ea2450b3b99ccbce6ea9520a4c67852a2d3ee1eff4c68d643414b4c664874e7e2bf64a13339d59607afa054e6e6c31a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\61469f3c-4cec-44f1-910f-e80497deb951\index-dir\the-real-index~RFe5d6729.TMP

Filesize
48B

MD5
65ca69a5ff383a7e5bc39b5edab58762

SHA1
0f3a3176801134ebf7a2dd7a2e7986d0507023b3

SHA256
bc27d814bf881e8cf47dc40fe2ff713925720f18488d5da758d4bddbfc73eee5

SHA512
dc370bd5ad5ab871dd10fc4875c0942b53f9ac791396bc1dc5171e6029baa53f1db600311719174470ab835284cfe3ade5912c75cac20887df7640c8236cc2d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\a52df397-49c5-4d22-982a-cd189b31f5c6\index-dir\the-real-index

Filesize
72B

MD5
67106a37cc3beeee740ae7a334a36ba2

SHA1
484306fbd69ff084acceb4fca97c394df3aa220f

SHA256
6386892e44537ead7f5238ad33e565c3b5d7272f222ef56eb3ab37a94fe1177c

SHA512
e2a08eeda03d6c5b9441a4cd07c595c8224c788ada73ba5ce8cadb5415b381028f4a79ee7ee65ae60aab1eb8ee0efa125ac2bbe5f56115e780075b4d92cb959f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\a52df397-49c5-4d22-982a-cd189b31f5c6\index-dir\the-real-index~RFe5d5278.TMP

Filesize
48B

MD5
235ee7395ac96a238deab411cef4c6e3

SHA1
05401c0ba577240cd4adf25016691466927b199d

SHA256
6f5b9147301590869af83c8dd3d4d6188689db3c15a5753e29ed9866b99e25b6

SHA512
2cc2a4095aab258d2dad7a4ef2971a09180af8771fe6f32572ec8616b834a6089ff2129fbc38cb0d1bf8fa9f1b41404a92ea0094cd1fa24a92290925fd186e3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
109B

MD5
7714d6e8c02f1f068386ab2671509aec

SHA1
15670ba6628b33902d0fa58110c5f419e6a81aa1

SHA256
bd8d4d0a67a9fa205f59794ec9552ce50f3f670bf8431ca6070e9a0865e581d3

SHA512
87efa50d27957965d801c78e5a626c679a40cd9ae38bd8d852d25e89573b4c4e5ee633216e91afb04e03806c9de608b2833223e8a60e70e240c0fff80a22b128

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
204B

MD5
c9db0e5744543aa7f763fac8c0f0801f

SHA1
f38cbd4de538513e501cdd8f1f8ec57df420713e

SHA256
d22b1706409bc4196b7a24dac03705c4191b2007f13cc37867f863a0911cfc21

SHA512
d4c25b9fb259d9a140005b0661381ff7db48388b8baae4a34b9282b12c4213c2eda815512bff2e2593c26d15faf57904b4a418fbf30b598681356f03fea1d396

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
201B

MD5
7c9d71ab58d2694ba0cd4d83ac315f8c

SHA1
1204c7bb1f3e8081e665bda760e898878e750dd3

SHA256
4ba7bc74fdd4e99cca78f32b3e7ff6b354d77bb145c8dc0f8ffb2378cd16c561

SHA512
3ee7c6596f7a4b67ff86e6b57d2553cd9119dc86baef5d9e69a9238909ec95ca7ab3b66b975a5cbf8ddf47f77367686872ee226dc4375c6bd9c515cfafd782f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Filesize
25KB

MD5
774ca7c83da1f927f32df2374696507a

SHA1
d6201b1b48961ce992bb6b5e6a25233dce2bbe2c

SHA256
465c606f48e8907340f2179c5a719be590d512af66ae518a14e0f17bb14c765e

SHA512
1a8b8267f03b2963d7d6f55425252193bb8a22408ee03f44063792e238c009fd141f74bf30deb325dfa3e1618ab06840df91dc56c1d55a64bed735cc34df6fb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
9336bc77f2630708748c1e0b22458e11

SHA1
02a237180d369289795cbd83d137d0ca4f7337f8

SHA256
7ad37a39af0ad3910c18992acd1218d9ddf5222ceab25ddd481865313e459a64

SHA512
779d525d55e52ae7caefd59321781c7cb6bb59265bfb70fc7d9472d9e9c3edf0db5759a1bc4ee5e4d169facd3b18fa23813b2c53d5a67ce472e706ee7046d924

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
60bf5fa2ec52354957e41ed94720de7b

SHA1
68f0eba2123c3c4ba226fea9c6343507c952c9d3

SHA256
4977d8e5c6c1c926ca328a06110ae6f794a577ea0bddd7c7e79c7dad0be59248

SHA512
71c0b71936e0c5fdb85588c1608690a9c4fa51863712b43b20c4e93a9e94f32ab74d4073598fb34521b59d75f268dc8a410b812d7e3c5473b35e3d1735e8b56b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
144B

MD5
6686a16223f6a2e9b1056ee356e07afd

SHA1
6e6353d249299470f8ad6c9af8f8d2bfc9ded0f2

SHA256
28fdfe8a20acb9ff61601cdec44ccd96d8846d021fbcbb03ccb384bbc0781c2d

SHA512
482b6eb4f3795109ad3c7b82c63f9ce45cea020838bf581ce5431dcccc868427ad4c296e65a99468c6976e876c64a23d75bf10f8cdc6274abc254fecb4a385c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ba3fd.TMP

Filesize
48B

MD5
64b813fb4d29c982135039f143423979

SHA1
c7bc8815f9fc47f29ca4250f087ff4e0c19ea430

SHA256
eccc199b73fc7b539d5ddcff772cb5342c33ffa226a9f913c577e124c2b32c39

SHA512
d7bde3fdce1cdf4a02c86d100ee82df8052714077765301ed8f1b8009d40a25baaace9f0f1bc57a4e9d3b1905f1e1768da609e30c664f6fd6748f366acd319bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
d056327d36cc9a706fbd420f5d140020

SHA1
f4ab771aee4f91bfc48da469b6f0260a923f9162

SHA256
a119232a52cd45c3b8e9ab93b3504a2e1411c2b8d5a6cfd8ce97f3c30257968c

SHA512
d2652429a229510b8c7df21dec3ff63861c01449f8935b19306fb7f9155fa2a1d30d031273581844dee21d3004fbe46f161d19538f8bdbc061189686a71c28e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
0cf1aecfb9ee516eaae4837d7f18af3a

SHA1
b7b5c71591900b0ad427e606615c65a0cfceb1dd

SHA256
4c8527bcd831042193f03a44a4e21bb1c3573fd977b86f8243f1f297030c14ef

SHA512
9abef78cec8ef23cfeb660373510202174cee8390b5f1f06f2f7676d1c6eac3b294cf2abb4ae33b7bb64cdc9f848fd3908d3bbb9db7475c45a8b346a24696a0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
9KB

MD5
caf2425ab2e185c31938a1d09e3e1008

SHA1
3e6c7a244b0cbac47676aac83dd19d2b7d4b0dde

SHA256
da6184e7e40a98aa2bf6f8094e01db266d8d070ccaf315bd2d478e54c537bc27

SHA512
841fe0a6a910cf944678800290681a36a6a634d55e9c4c0365db6c5a9af33aeddaa2dbe49a425cbbe253c1833fd21f3214bada1026ff44746a19aeaa87140423

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
b325ad8944a9e24eaa9e5439f87d35d2

SHA1
a5f9e71d77deb7a40a3348c31377a830faef3e42

SHA256
4e403fc4c7a58012e721354e22611bdfbca8f8931e4d6b31a999a5299f185331

SHA512
3b4054b063f60dddc05412f0c52fa4d6162f66a6a3f2827a900d0806116091ca490594dd1127ec5b68af2dfce7adf1f82575965c50ad7a82902f1c318e8284bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
af8e9f8c173fe4692e5920319f276c26

SHA1
9974c6bd81242a424b1c8913234d2ce95dc6b5a4

SHA256
da7d19dd590764ebfc2be0e0b16af4b04d48ff0827673188af6106a01ecb527f

SHA512
5449ec0150c0c58c30950822fb5655745bb531fe6659cf13cb72f32ccaf3d9ec44f8dba1e41de0d29259dad5acf6e3634175fc5785290eaf76ed6cdc2e5cbaa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
300cfb58940f8d9a98d4f2fabbf19922

SHA1
1a7a94b7d6b9c28cebc52009da497ab207c8c2ee

SHA256
58e7d937257d6351c780bb3ebddef67e5a15f08e33cb6c875e8cd8435fd29b69

SHA512
91fb7a74dd1f07f98da21cb72adf175105c296f713067ab41bbbf97873ceb9abc41fcf10a78859c1f905cf2bd52512156260bec8a8d1d07a738daa2f2a5f9d6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
f610e80621a00dea76cf717ca725fcf7

SHA1
28516c8111568f6abb7a8c65d5a7164e9c799fa2

SHA256
4aa3efb92e77f5a22a8c59add7e3c9969b98c29192c4ca639fb1f47aa8db9248

SHA512
cc65c0f86e4dbb586a4cdb8d59414663b7665084588def68a6507584218510510af8a247d7026a039b2fd84ae8d5ff479b72dc56663077b753e46ed72dd31889

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
beec106b27f2ed8d9b311eb5949efdb1

SHA1
9ab0d59a88fab893ae6341ec627126a51593ecfc

SHA256
f2252d6279e5d4036ca66952e8a17fd07eedf2f491e3ed8a263b0588f958dab4

SHA512
098cbe99e02da5a034a5af8dcd05bf200cf5d772c67a95d3d578d9d7abe524d9e258d8b1e1e4fe7b550f7867518c20853e1179b040c6da0d18cfd503732e80c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
9KB

MD5
9f6deb345c391e3712cb17453f213171

SHA1
d307078cb37950f365f8056b7d3a21db0d6564b3

SHA256
9fdfaad75b23e67b783f6d2bd81032dd57ae665469458f7b9ae322d028a9864a

SHA512
1dc24252869ad7d13e5b54c4765e14fad40c6e75b3687059d2cf83bc289f1826554bbf4233cb011b029795e4af0252870aaa177210ef25673a7451f7cacc4ffd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
1a518b0dcc3059dcaaa87d833a007938

SHA1
9a5ae280928558aec433fe25f0394a9360a247dc

SHA256
2ed23fe80407994b28228f6f90a619a5b57927de24bf58a0e70e670485603ebd

SHA512
e40cee1d169c9dd306db1aa12231eb6b276ca959840bdea61b372459c2735ab2a56bbdb71f6a0a282847497f074bd0bc6a2d5e552b3b42e2785e3c33337b93b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
16190f327cf132d5fbfa61ffbb1150d6

SHA1
f459224ee30901f1c9ee852871970892ce91ead7

SHA256
89353c93492b0468139ac41f3f752cb4ba86729f2fff4b5102d95405d5371400

SHA512
5abcd26f5438b3ea4c6baf44c507ff53e941690bf1cac0f19f9200058fc1f2602af6c5ce65971f397ac4f4bdb42e0112244bca8c51248745db8a314e3ca16065

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
6895712589de5e223efbacfa87f7abfb

SHA1
26848078e0a5fa13626ea9f8bb85650bd88fd674

SHA256
27054f578c2007848e7c3e86a241384362d0b4a31d036466d7bd7883ed962a8f

SHA512
d3dd13889580e1f9a546324d0468354828973d142de4f381752af9ba793f28cc241f9f787e72d08deabfdbdbdf66f18eb75b91320b1383d0b7bd50f9b96075cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
c9e20a3efc2121d6803b6b2026aa9d21

SHA1
ef62a1086babd75fae2a1d3e5c0d5e79a7492fcd

SHA256
ad588bf09e2e0953f0add6f6b7001f67f43cefdf82c6e77b12e28ac9e39e8f3e

SHA512
2dc501d5f0f5957b6cecef61ab1b9cfbd966c27b0ecfa143122ba42a5c365cf457ee543596ca73181c9e4a33252de5880179288069d9051a59e351d9626cab22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
5166d76329e5a8fc6cc913a50bd3acbd

SHA1
f8365ec11a2db2e338f44e23a28f477d02e17a1e

SHA256
402ecfd1e30f8363401e16efbd37c313118a037c7fdb328b9371f243301819a6

SHA512
36b639f5933bd73b61e9205813fef78bf2151460a3cb70c3586bb15c9f5b11b0a76f1f9496c064f99a9008aa380976c7ff3dd1be22a55d85a7a8b430169b2d56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
ddcca61241165ffa844778850352d506

SHA1
2cf064b6c351937230a46ef182fa4db8eb1dcf48

SHA256
5336ad908e2319e4a07ce64b994f595fdd0b17a3d51ff49fa6edea71d9708387

SHA512
decb4ecda123e2d1e936eace7c5a31d40371636b27a823ed961554091d54faa51f7ac6992e98110a314efc008cd370d74a600de5ba6a38f3be7517d3d631f76f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
d487a35b150c943a3413b32cce054325

SHA1
8e8daf19d803afd729e41d74e95d0aa299648b2b

SHA256
43e1aef06a2e72dd9a909424336e5a30b86dc383be60d917e2620e8fe952ae10

SHA512
b57a5d03f0f2a35c394ee1188a79e75550d798f30c1bfbea9b88eb9242e240791c75531ea2d7f93b197b7cd6f45d59c0167f9b73dffe439fd87c24e9e4c3c487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
f0b05ffae05b287b0b3c2395da317feb

SHA1
42954308488dc0882870980f75f4d56fd00557b9

SHA256
7403a3946e60be5672e4723c2807806136c52629b79f5130a0ec06ef67ab5235

SHA512
b2109939f003d0016cd4766d9ed55f45a4a9fd3d462db24e319040daba633614814cbbdf4b3e861e8cddd0a96f6d1cfd61e347df5d1edf6a92948232b9dbf00d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
aa6c96fe2fdf45ff43cb5b6d34eab3ff

SHA1
67fc3732cac568bd1718883dcf605c8acdb58dbe

SHA256
46093471ef7e329458dd8f3a3f92891dd18bb1075d5e1d6f81ca0ffbde848d52

SHA512
7d837605853714db14249c19b4fa0ef02c3205986dbd93973eb1d1f68b955ca9abe71ee4df58504648af5f6d8137d589ce7d817c6f6e4474b23077612a154fc5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
fa517bd52c59866531cd8d3116e2e060

SHA1
a1b972c68ed62053c444574e855b3c7aa53ca392

SHA256
6a9b9219f9bcb1c0452745a355e5246d686fe75da58737ba9584e69258a353a6

SHA512
b73d50873fc021f0f56486e7b507faf07a550224dade8b3d4d4264123047f32b4e48fa762c98531d9ee87131d23f8b6a311c0105c5d8f4815a900b7df0a3b8ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
05b2e6ccb72f083f2cd5cfb8d17ed9ab

SHA1
9bb30b0445c7c62b336b4b1b58139e38096a32a4

SHA256
de43a198c23ac2dc46f3729e06f28d63e80fe6f286721abd119f878783bffc71

SHA512
a1ce921bd50f20c073a8bdeda3e1389a402589edb94e23b4618b1e8292835195b124bf4e046c85b099e5ab54598a35e81cf0732b44885214cd1eff433a82b53e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
c4bc8459c6ccfd84e7ef5749f8660f93

SHA1
3ac46a7657e6720f9ba9c3db3e0583e0070e2db5

SHA256
e861914439aedcac87fbedee563fe2ac0e6ab45a8d5e452c0143d41d17c603c6

SHA512
2fbf0a13bae6e85c102c3247ffece58d975acb68abd9e4a8583a191d641621b5f84c071db38d0b462a44821b14c51bc9b6e5d53b97eff12a620b572f1cb84dc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
39dd57faa4de352fa8d22e87ef7a0dea

SHA1
2c07b863287ac00e1fed3320c5944a4d40be8607

SHA256
64b2bd1281cf9d3e192e69e6257083abc0ab4e412951234fe353e7219d059649

SHA512
d1ac3708acf493d694d812a4ba4a018a51789705d1c977846efe3613f264622f38526ae0da71e1fb52fda1cad52b7364add62d7c50e9d99b3307230cb5bd49bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
35b6dd1563616fde1a8a483ef67c401a

SHA1
3de96d36ee65dd399cc40fddf7795f09d5c489fe

SHA256
76012976188e81ebbe038a6006da85bcf7e901f204603e313b488949f1416cea

SHA512
bc5ed0753a7d3c65bbc319484c40d0806edaba299ab68bd616613c3d0360880c0ff192e8e1973c2702a89172c01b750308fb5b8008b49d2b5a7d2ad69509d897

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5b750d.TMP

Filesize
536B

MD5
e3cd0feb32ff3e3c97dd570c67d238db

SHA1
546e6de65caf0df6bbee7b18be1c315ef8215ebe

SHA256
4c5e4875a4ff638e3e8d320ba4e6bdf081552b8baf1dd191464e27c9929c1d06

SHA512
b61595fe7529baf45b3606509a3c5c5bfa0fee67d5b78e1d604c5d264b6998a5ff1cd23ad1ffa4b221478cfc2b8286f40e6181c3ea79d3fe6d2f128c353c02f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
02b7e9592ce7d0fd3483c3f099fb6f6a

SHA1
d53972ed8cbc855658d312d5159ef9ab8368ca9d

SHA256
b22e71d2a9d8c4f46807e61b309eeaa4a33524b22d70d62e2fd69ea29df68ff7

SHA512
2f260aed2c2713b122189ea3d151be4bd108cf871f4bbf2d0fb8545ab98ddb198d73b9b9232c167fbc380cdf38896d56947465ba1cbcfa57186242dda7f2acd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a5977eb8ea14dbdb797c520bebdc478b

SHA1
582ec50267208269534d018c7d7af67f877c317d

SHA256
c05e30611e0660fb24bb1b48eb1e677c81629e140b3dfbddb6e470995b0d5448

SHA512
3f8cf53b79af777e48ad19dcc4363f01afd99d2520058f10a3e4e9ab9456ca7db184ab0a6e3459001fb4555b36bbd9947c68174a547c8b799a13605a2b7e8bcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
b32281387b68c81ce173381fbc7dd982

SHA1
1940002ec4bb95ae11344aa911a1333c6c0ffc29

SHA256
a016bdccaca80d0e8107b228f5c867e27bc9b117b381d502b86cfdd32337e5aa

SHA512
257bfb8f3fa792d399ed13cac03d03bec4ccd0483f1764fe325b68d86d8bc53ff4c9ebfe0a679aacea7a1a0f126106f15bbd7f4af6a84a0879002bbc2a427278

Download Submit
C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\0589302f91aa343fbe0005be96fccbe2

Filesize
7.4MB

MD5
0589302f91aa343fbe0005be96fccbe2

SHA1
e522005b2f17a5e1686ec12c78c59f9ea97bf3a2

SHA256
24a86d06e182f61060442200d2e197a3bf1ae0757ccb60ba65137b66e63fe236

SHA512
63e5f206365b59426f9bd66bbed78ad0e74018f5d9485f69793fa1fbb78beb8baf3f182814c4938a123a6ea993b91f39a3d070e676bf146e622e99a4e2874279

Download Submit
C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\a1c0810b143c7d1197657b43f600ba6b

Filesize
7.2MB

MD5
a1c0810b143c7d1197657b43f600ba6b

SHA1
b4aa66f5cdd4efc83d0478022d4454084d4bab1d

SHA256
30f233f41ec825806609fb60d87c8cb92a512b10f7e91cdbb4bf32cee18217ae

SHA512
8f45702da43526c04b957f571450a2b53f122b840fa6118a446972bc824c8ee7acd6e197177b54236ce7f428fb73a7cbe4ed18d643c625c9f156463d51ee038a

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
151cfca89d2d603164802e006354f9d6

SHA1
acc6709c25a40d58ecdbae164bb320907442dde8

SHA256
b7a4b800e839e84439b0a875f04921bc4f05634722679694723090777dd9ad0a

SHA512
cb55651cadd8a60c7a8ec6a46d11ec7dcc35160d883b0ac441aed075ab29663885ada1bc30b3e57ee349a4bf6262b38560b077ee10faad171f51dc510de437ef

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
11KB

MD5
e730d4b7040550e793f0dde99241d269

SHA1
f891f9d63b7d1d2f2d8a6b8ce6f6e077c470726d

SHA256
a51b515fbea3a2b6fc609327615a93a184c923719d4ccaef5d0f6c2a17ba2e7a

SHA512
2c4fa6ccb633ca02be9542be5cbae43aeff0d752af80de4ccac4eb7c26be23cf395dc780133fd77d837a12be3fe2511c517754f81066529e5e28fb4b8df5bc3a

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
13KB

MD5
99147bd23b394e2bc26dfb78bbf96696

SHA1
c935ccbab28b3f5c920f0f35bb261d73423701b4

SHA256
da0de8f7a99daac790a8cc74a63b0c2d0e4d97e603ec5aaf19ea6f616c3c98ff

SHA512
ea479120078b5a39becd09817811fe1828be8799099c88dfd4e3848eb0e4fcc705cc76d5327b085e766e7ab426347344d2ab3f5911fa573057633dd0ffc96262

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
13KB

MD5
2a96d7f9ed71a0ac5ec1a82e8fc5ebde

SHA1
5d5299aa5f0b089a52b2570f3c615fa788340ca5

SHA256
df7f3d2b344066ee90428f1796acdcdf5485183b00b6cf110da3633162b754bf

SHA512
7799b5649c56932c73ea07cacfee708af9a85a01b41958dfb67e4fe887bf885a5fbc6e8562be3d6743b85036e3e94df42ec745d77ea3b43aa4be904c749083c6

Download Submit
memory/3624-4286-0x00007FFF42910000-0x00007FFF42940000-memory.dmp

Filesize
192KB

Download
memory/3624-4262-0x00007FFF44DA0000-0x00007FFF44DB0000-memory.dmp

Filesize
64KB

Download
memory/3624-4285-0x00007FFF42910000-0x00007FFF42940000-memory.dmp

Filesize
192KB

Download
memory/3624-4288-0x00007FFF42EF0000-0x00007FFF42F00000-memory.dmp

Filesize
64KB

Download
memory/3624-4289-0x00007FFF42EF0000-0x00007FFF42F00000-memory.dmp

Filesize
64KB

Download
memory/3624-4290-0x00007FFF42FA0000-0x00007FFF42FAE000-memory.dmp

Filesize
56KB

Download
memory/3624-4292-0x00007FFF42FA0000-0x00007FFF42FAE000-memory.dmp

Filesize
56KB

Download
memory/3624-4291-0x00007FFF42FA0000-0x00007FFF42FAE000-memory.dmp

Filesize
56KB

Download
memory/3624-4293-0x00007FFF42FA0000-0x00007FFF42FAE000-memory.dmp

Filesize
56KB

Download
memory/3624-4294-0x00007FFF42FA0000-0x00007FFF42FAE000-memory.dmp

Filesize
56KB

Download
memory/3624-4295-0x00007FFF43B10000-0x00007FFF43B20000-memory.dmp

Filesize
64KB

Download
memory/3624-4296-0x00007FFF43B10000-0x00007FFF43B20000-memory.dmp

Filesize
64KB

Download
memory/3624-4297-0x00007FFF43B30000-0x00007FFF43B3B000-memory.dmp

Filesize
44KB

Download
memory/3624-4298-0x00007FFF43B30000-0x00007FFF43B3B000-memory.dmp

Filesize
44KB

Download
memory/3624-4299-0x00007FFF43B30000-0x00007FFF43B3B000-memory.dmp

Filesize
44KB

Download
memory/3624-4300-0x00007FFF43B30000-0x00007FFF43B3B000-memory.dmp

Filesize
44KB

Download
memory/3624-4301-0x00007FFF43B30000-0x00007FFF43B3B000-memory.dmp

Filesize
44KB

Download
memory/3624-4284-0x00007FFF42910000-0x00007FFF42940000-memory.dmp

Filesize
192KB

Download
memory/3624-4276-0x00007FFF43580000-0x00007FFF43590000-memory.dmp

Filesize
64KB

Download
memory/3624-4277-0x00007FFF43580000-0x00007FFF43590000-memory.dmp

Filesize
64KB

Download
memory/3624-4278-0x00007FFF43580000-0x00007FFF43590000-memory.dmp

Filesize
64KB

Download
memory/3624-4270-0x00007FFF434D0000-0x00007FFF434E0000-memory.dmp

Filesize
64KB

Download
memory/3624-4260-0x00007FFF44C90000-0x00007FFF44CA0000-memory.dmp

Filesize
64KB

Download
memory/3624-4261-0x00007FFF44C90000-0x00007FFF44CA0000-memory.dmp

Filesize
64KB

Download
memory/3624-4264-0x00007FFF44DF0000-0x00007FFF44E20000-memory.dmp

Filesize
192KB

Download
memory/3624-4303-0x00007FFF42A70000-0x00007FFF42A80000-memory.dmp

Filesize
64KB

Download
memory/3624-4265-0x00007FFF44DF0000-0x00007FFF44E20000-memory.dmp

Filesize
192KB

Download
memory/3624-4266-0x00007FFF44DF0000-0x00007FFF44E20000-memory.dmp

Filesize
192KB

Download
memory/3624-4268-0x00007FFF44DF0000-0x00007FFF44E20000-memory.dmp

Filesize
192KB

Download
memory/3624-4269-0x00007FFF44E80000-0x00007FFF44E85000-memory.dmp

Filesize
20KB

Download
memory/3624-4267-0x00007FFF44DF0000-0x00007FFF44E20000-memory.dmp

Filesize
192KB

Download
memory/3624-4263-0x00007FFF44DA0000-0x00007FFF44DB0000-memory.dmp

Filesize
64KB

Download
memory/3624-4283-0x00007FFF42910000-0x00007FFF42940000-memory.dmp

Filesize
192KB

Download
memory/3624-4304-0x00007FFF42B70000-0x00007FFF42B80000-memory.dmp

Filesize
64KB

Download
memory/3624-4282-0x00007FFF427A0000-0x00007FFF427B0000-memory.dmp

Filesize
64KB

Download
memory/3624-4281-0x00007FFF427A0000-0x00007FFF427B0000-memory.dmp

Filesize
64KB

Download
memory/3624-4280-0x00007FFF42690000-0x00007FFF426A0000-memory.dmp

Filesize
64KB

Download
memory/3624-4305-0x00007FFF42B70000-0x00007FFF42B80000-memory.dmp

Filesize
64KB

Download
memory/3624-4306-0x00007FFF42BA0000-0x00007FFF42BC6000-memory.dmp

Filesize
152KB

Download
memory/3624-4302-0x00007FFF42A70000-0x00007FFF42A80000-memory.dmp

Filesize
64KB

Download
memory/3624-4271-0x00007FFF434D0000-0x00007FFF434E0000-memory.dmp

Filesize
64KB

Download
memory/3624-4272-0x00007FFF43560000-0x00007FFF43570000-memory.dmp

Filesize
64KB

Download
memory/3624-4273-0x00007FFF43560000-0x00007FFF43570000-memory.dmp

Filesize
64KB

Download
memory/3624-4274-0x00007FFF43580000-0x00007FFF43590000-memory.dmp

Filesize
64KB

Download
memory/3624-4275-0x00007FFF43580000-0x00007FFF43590000-memory.dmp

Filesize
64KB

Download
memory/3624-4279-0x00007FFF42690000-0x00007FFF426A0000-memory.dmp

Filesize
64KB

Download
memory/3624-4287-0x00007FFF42910000-0x00007FFF42940000-memory.dmp

Filesize
192KB

Download
memory/5592-4163-0x0000000000740000-0x0000000000775000-memory.dmp

Filesize
212KB

Download
memory/5592-4164-0x0000000073570000-0x0000000073780000-memory.dmp

Filesize
2.1MB

Download
memory/5592-4209-0x0000000073570000-0x0000000073780000-memory.dmp

Filesize
2.1MB

Download
memory/5592-4255-0x0000000000740000-0x0000000000775000-memory.dmp

Filesize
212KB

Download