hxxps://prod-mw[.]xara[.]com/static/images/document/1742827731306/uuu76MACOp/89[.]htm

Analysis

max time kernel
476s
max time network
478s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2025, 14:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://prod-mw.xara.com/static/images/document/1742827731306/uuu76MACOp/89.htm

Score

7^/10

microsoft discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing

Loads dropped DLL 1 IoCs

pid	Process
3408	msedge.exe

Detected potential entity reuse from brand MICROSOFT. 2 IoCs

phishing microsoft

flow	pid	Process
237	4864	msedge.exe
245	4864	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-shared-components\sv\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-tokenized-card\sv\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-mobile-hub\es\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-notification-shared\de\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1803653345\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_2046773863\well_known_domains.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-uk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-und-ethi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-nn.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-pt.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\cs\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-mobile-hub\ar\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\wallet_checkout_autofill_driver.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_987181059\Part-IT	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\da\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\th\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-shared-components\ru\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\wallet-webui-560.da6c8914bf5007e1044c.chunk.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1466155809\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1521749068\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\fr-CA\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-hub\zh-Hans\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-shared-components\en-GB\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\Notification\notification_fast.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1155746355\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\fr\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-hub\nl\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-tokenized-card\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\Notification\notification_fast.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\wallet-icon.svg	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\wallet-webui-792.b1180305c186d50631a2.chunk.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1155746355\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_199154559\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-mobile-hub\de\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\Tokenized-Card\tokenized-card.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-et.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1521749068\edge_tracking_page_validator.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\hu\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1521749068\edge_checkout_page_validator.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\en-GB\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-notification\fi\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-notification\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-notification-shared\fr\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1466155809\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-lt.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-mobile-hub\zh-Hant\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-shared-components\el\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\Wallet-Checkout\wallet-drawer.bundle.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_199154559\Microsoft.CognitiveServices.Speech.core.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-la.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-or.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-shared-components\zh-Hant\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\wallet\wallet-checkout\checkoutdata.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_987181059\Filtering Rules-AA	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\nl\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-notification-shared\sv\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-shared-components\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-ec\de\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\wallet\wallet-checkout-eligible-sites.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1466155809\sets.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-notification\ar\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-notification\pt-BR\strings.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133873860875536364"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3975168204-1612096350-4002976354-1000\{1BE3AA75-D514-4F23-96FE-7A045324CF87}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 54 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3408 wrote to memory of 5680	3408	msedge.exe	87
PID 3408 wrote to memory of 5680	3408	msedge.exe	87
PID 3408 wrote to memory of 4864	3408	msedge.exe	88
PID 3408 wrote to memory of 4864	3408	msedge.exe	88
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 3504	3408	msedge.exe	89
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90
PID 3408 wrote to memory of 4004	3408	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://prod-mw.xara.com/static/images/document/1742827731306/uuu76MACOp/89.htm
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f4,0x7ffae872f208,0x7ffae872f214,0x7ffae872f220
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1892,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand MICROSOFT.
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2180,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2312,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3512,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3520,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4704,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4832,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5488,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5624,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5624,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --field-trial-handle=6020,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --field-trial-handle=6812,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --field-trial-handle=6928,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --field-trial-handle=5572,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --field-trial-handle=6180,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --field-trial-handle=6792,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --field-trial-handle=6856,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --field-trial-handle=6480,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --field-trial-handle=6556,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --field-trial-handle=7156,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6772,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6980,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=3748,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --field-trial-handle=6832,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --field-trial-handle=6224,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --field-trial-handle=3744,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --field-trial-handle=3604,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --field-trial-handle=3676,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --field-trial-handle=6596,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --field-trial-handle=2108,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --field-trial-handle=6496,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --field-trial-handle=7020,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --field-trial-handle=7072,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --field-trial-handle=6424,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --field-trial-handle=6632,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --field-trial-handle=7044,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --field-trial-handle=5204,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --field-trial-handle=6664,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --field-trial-handle=6844,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --field-trial-handle=6800,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --field-trial-handle=6696,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --field-trial-handle=5132,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=4036 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --field-trial-handle=6436,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --field-trial-handle=3564,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --field-trial-handle=2996,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --field-trial-handle=6660,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --field-trial-handle=6516,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --field-trial-handle=3504,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --field-trial-handle=6896,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --field-trial-handle=5128,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --field-trial-handle=6612,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --field-trial-handle=6172,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --field-trial-handle=3716,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --field-trial-handle=6140,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --field-trial-handle=6152,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --field-trial-handle=6072,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --field-trial-handle=5568,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=3592,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:8
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6252,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:8
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5108,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5072,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=6132,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5400,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6924,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4968,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6120,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --field-trial-handle=4756,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5212,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:8
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7212,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --field-trial-handle=5792,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5960,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7492,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7504,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:8
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4388,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --field-trial-handle=5200,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --field-trial-handle=5020,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --field-trial-handle=1600,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --field-trial-handle=7716,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --field-trial-handle=7964,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7948 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7024,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=7740 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7560,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=8252 /prefetch:8
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6712,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=8388 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=2720,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:8
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8472,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=8492 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7452,i,16081437645674542892,12344683757029336764,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:8
  2⤵
  PID:5676

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:4740

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1155746355\manifest.json

Filesize
53B

MD5
22b68a088a69906d96dc6d47246880d2

SHA1
06491f3fd9c4903ac64980f8d655b79082545f82

SHA256
94be212fe6bcf42d4b13fabd22da97d6a7ef8fdf28739989aba90a7cf181ac88

SHA512
8c755fdc617fa3a196e048e222a2562622f43362b8ef60c047e540e997153a446a448e55e062b14ed4d0adce7230df643a1bd0b06a702dc1e6f78e2553aadfff

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-as.hyb

Filesize
703B

MD5
8961fdd3db036dd43002659a4e4a7365

SHA1
7b2fa321d50d5417e6c8d48145e86d15b7ff8321

SHA256
c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe

SHA512
531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-hi.hyb

Filesize
687B

MD5
0807cf29fc4c5d7d87c1689eb2e0baaa

SHA1
d0914fb069469d47a36d339ca70164253fccf022

SHA256
f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42

SHA512
5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\hyph-nb.hyb

Filesize
141KB

MD5
677edd1a17d50f0bd11783f58725d0e7

SHA1
98fedc5862c78f3b03daed1ff9efbe5e31c205ee

SHA256
c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0

SHA512
c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1237556727\manifest.json

Filesize
82B

MD5
2617c38bed67a4190fc499142b6f2867

SHA1
a37f0251cd6be0a6983d9a04193b773f86d31da1

SHA256
d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665

SHA512
b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1466155809\LICENSE

Filesize
1KB

MD5
ee002cb9e51bb8dfa89640a406a1090a

SHA1
49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

SHA256
3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

SHA512
d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1466155809\manifest.json

Filesize
85B

MD5
c3419069a1c30140b77045aba38f12cf

SHA1
11920f0c1e55cadc7d2893d1eebb268b3459762a

SHA256
db9a702209807ba039871e542e8356219f342a8d9c9ca34bcd9a86727f4a3a0f

SHA512
c5e95a4e9f5919cb14f4127539c4353a55c5f68062bf6f95e1843b6690cebed3c93170badb2412b7fb9f109a620385b0ae74783227d6813f26ff8c29074758a1

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1521749068\manifest.json

Filesize
145B

MD5
92d8fd80d37e7f7ceab3b7f7e9ade68a

SHA1
f350b2460c3d9a9dcf1ed3fb965f727503a7944b

SHA256
2262c642067206eb885632bcfd0e12238155a14c98fd46be587c852471514513

SHA512
8112d4bd7256726fe63dea0eedf8c274f90424d29ee3cc4c360ba0c54ccc1d07ef36faf1a2fe19d1aea1447dd5a6ba6d2db0607161c486e882bcb3c01885238a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_1803653345\manifest.json

Filesize
79B

MD5
7f4b594a35d631af0e37fea02df71e72

SHA1
f7bc71621ea0c176ca1ab0a3c9fe52dbca116f57

SHA256
530882d7f535ae57a4906ca735b119c9e36480cbb780c7e8ad37c9c8fdf3d9b1

SHA512
bf3f92f5023f0fbad88526d919252a98db6d167e9ca3e15b94f7d71ded38a2cfb0409f57ef24708284ddd965bda2d3207cd99c008b1c9c8c93705fd66ac86360

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_199154559\manifest.json

Filesize
76B

MD5
ba25fcf816a017558d3434583e9746b8

SHA1
be05c87f7adf6b21273a4e94b3592618b6a4a624

SHA256
0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11

SHA512
3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_416396384\manifest.json

Filesize
1003B

MD5
578c9dbc62724b9d481ec9484a347b37

SHA1
a6f5a3884fd37b7f04f93147f9498c11ed5c2c2d

SHA256
005a2386e5da2e6a5975f1180fe9b325da57c61c0b4f1b853b8bcf66ec98f0a0

SHA512
2060eb35fb0015926915f603c8e1742b448a21c5a794f9ec2bebd04e170184c60a31cee0682f4fd48b65cff6ade70befd77ba0446cc42d6fe1de68d93b8ea640

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\Notification\notification_fast.bundle.js.LICENSE.txt

Filesize
551B

MD5
7bf61e84e614585030a26b0b148f4d79

SHA1
c4ffbc5c6aa599e578d3f5524a59a99228eea400

SHA256
38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179

SHA512
ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt

Filesize
1KB

MD5
8595bdd96ab7d24cc60eb749ce1b8b82

SHA1
3b612cc3d05e372c5ac91124f3756bbf099b378d

SHA256
363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831

SHA512
555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\json\i18n-tokenized-card\fr-CA\strings.json

Filesize
2KB

MD5
cd247582beb274ca64f720aa588ffbc0

SHA1
4aaeef0905e67b490d4a9508ed5d4a406263ed9c

SHA256
c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5

SHA512
bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_953123735\manifest.json

Filesize
121B

MD5
7122b7d5c202d095d0f4b235e8a73ca5

SHA1
0cca47528a8b4fb3e3d9511d42f06dc8443317c2

SHA256
93b603f06d510b23b95b3cacd08c3f74c19dc1f36cd3848b56943f069c65e975

SHA512
ad6fba6e0710cc26149dcf7f63143891aad4ebba0cc45670d8885fade19dc1a50b542a15b10a7604b6b1be4b8e50fcd5514f40c59b83cc68bd10a15ab2a93c1a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3408_987181059\manifest.json

Filesize
116B

MD5
2188c7ec4e86e29013803d6b85b0d5bb

SHA1
5a9b4a91c63e0013f661dfc472edb01385d0e3ce

SHA256
ac47cc331bb96271da2140941926a8accc6cb7599a6f3c17bd31c78f46709a62

SHA512
37c21eaff24a54c2c7571e480ff4f349267e4404111508f241f54a41542ce06bcde4c830c6e195fc48d1bf831ed1fe78da361d1e43416cfd6c02afa8188af656

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
65044109d1beb8ed8d59560642cbc519

SHA1
0084485b0aa26069232fab51ee603682e8edfd17

SHA256
a1e0b448218678b30356cbbe4092ea091435e7450822a9748361b6e8b198962d

SHA512
96dcc68fe92f98c4329a8335cfffdb0849a52562431045ccc42076bda0abf3842491303fb669246bfd04e64113688d3f90000a09571dd76ff84b52e34e45f9b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000007.log

Filesize
21KB

MD5
b9adade15058678b5bbac57a6bdb3789

SHA1
d06dc70ddbc0913ff268bb4a2f4ccd1a4edf6335

SHA256
66c3d69338ceb4c78a9bd892a5df88a189f30c350a7f94d15c4d3b83515017be

SHA512
7866954cf1f711c5df960121cef0c35af873603f10a3cc2457efa4f7f1e7779ac0c6ee4904383eeb4fb2bb784e734e6eab683a8597f84e196233737cc89d89aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old

Filesize
357B

MD5
397357694d6a1402292fde3013bdd305

SHA1
2cf37f7db98ad16d7c5a3994beb19f75eff6dc90

SHA256
01d0c161545f159a55deda94a39b61279dc3dafeaf405a5805361ef01d2332e3

SHA512
1c26998c2e22d0bad40ee0a4a30871cb4b1bce16afe1289c50ec95fc1aef3b3a3185684ba0193f87a98703725ec52fc79154f35048751b48d9ac31c34b568ab4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old

Filesize
331B

MD5
739dc5e04e61c3790273612a07ba7a37

SHA1
f5cc7bd3cdd14550332d5da7856c27b3c9c480b7

SHA256
08041e7514434312afb4690bbcf5b81cfcfe89d37f5aafd39ee6c91b560eea6e

SHA512
df5d93e39d843f7e1e78f0badbadf792016bae3ea0e3a78724c42eb6fd51dd91a91f45d75e41e7ba83b933244318d2bef7ad3a1f3b4895d77a916160c1f61259

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001

Filesize
268B

MD5
aaad69ed7d4c5d8afb6f9adfc4366cd4

SHA1
bccb868ec5fddc1a0f8d7e480a860bf7c94d65ed

SHA256
c1695939df037b82c69e69c8b5191bd63bf765f2dccaaa1540bcc3ef31a15562

SHA512
46d9b8baaedaf9f2cc303e00aee0b43b0ddc5ebfb71dbaa33104b56a2ce5604d82e84b3557d2c7e116ab414c35ef270d0166299031db7ac6c970e723e2140d32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b

Filesize
27KB

MD5
8f3e938d5c543700bb66703faf6f4b2c

SHA1
894222e85024aa2483cb2f29c8363b20318e9e40

SHA256
3046789938db57064d2054f219b7bbdd3af00456fc88d822d0492630c1db0e18

SHA512
fe6ea7fb77f46a01b0b1a998f4d9664655521647838d5f4b03d1cc195a6a1db9cf53fc9fed54b246b535325377e4c6988abee60efdb191cc1bb1d1e5eb6aa1fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c

Filesize
36KB

MD5
fbd059f451b5cd12373f6afbbca681bf

SHA1
de904f3806c0e554f00084c3ddee72c531890c1a

SHA256
a560311d6337b1086803683233c9afbe161f1c1d1643f2c47ae560d12764ec87

SHA512
d04d84037dbdac5ab302239ba303b049e2f3cae6c4bd0b7195bb5fc5897f2fe7ad603fd63e12921461aa35dd48035a8327b53558f3204cddf554cb4c04b491ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d

Filesize
28KB

MD5
cf826e3b9e20a53123f81fb8fd9db605

SHA1
23524ba24183bbbce87d4567361bec9f4aef492b

SHA256
cdd9b075884b4b4560d0d63fceb9b41ff6b03d32afa24f94e86f10a54fab4604

SHA512
13edb3e6bc02cd0c06c059b11620ee6a8925d863f2dabda4cb05a9dfddd80abec421ca2d952ade180d79f638fa5573b82ab30fdcb3e37a0b946ca32e4ffc5172

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e

Filesize
42KB

MD5
e1547da685b825c81d30c40be9ae2743

SHA1
d9547865d7b2b4802b487e18a6cf75a5fca1cf90

SHA256
b988bdd18a51134e9d9deef66368023f898a71fb1de42a9a93f0c8143c6c29d7

SHA512
b62bc9c39f77f8535486187c84b04edd98774e05f911952180be20509a6d74cbed14aec90f947cd98e18761e1d96c1d03174786334c8bbaceac40313d1a54c41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f

Filesize
35KB

MD5
44cbf080c8b4c94e2945b5526564a2e0

SHA1
4df54a416080714dff7e630e7bea0a0fde0f59cc

SHA256
b59a26acdb5bb37d66f55dd6581ef0dc8e615fa3a8640cd36da347447612eabf

SHA512
540f2a553ed1ed7ae1b7bca44e6f894b96131c669d8ff71250764764aff7872f54da341e269afa6755b7a20c5fb1644acee162c10d717cf533fcac9561192383

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080

Filesize
37KB

MD5
6d1a518abe73d685b974ad6014b6f83b

SHA1
858078e7349715910eb5800e005e693bd64dd998

SHA256
11172ee88b8a2b126dcb0a4a557557fed0f61c215463c3a4d2dc69c020b0bed0

SHA512
98985c29f5a7fd83d812ec666bcb2051a3cf27947bc63630f664e578aac229344579ef63688f0ae7ed8518afe3f89c98d6bdda49e08520ebf262aeca276c4321

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081

Filesize
35KB

MD5
f5dc2299dde15c08420ad85eeb110c14

SHA1
274bdbea661ae78d1d3de45b43e33351496ebabe

SHA256
985f573cd26d799d633f8232822ef68c3b0b7a31d62e0bc3a2efc9b892aa9120

SHA512
58d480b3a66758296b28b7e39597b69ec72d4025bb676eb0d1545601fafc4a16c5c56f33981c9765948628ed7e9e33960680148ce6ea9dc01bf8006aafd7c12f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082

Filesize
45KB

MD5
8bf342105d5e153bf7f48882de34b2e5

SHA1
c3b73a43daedf5e89939848170d868330a150ab5

SHA256
331822c5a1c80f84c8f231e286b6f8de00a6569d58de2970a7e56143d5ccb828

SHA512
3093e07e4e1e2913a6a1aa3d73c639ba663e2be2de3c6af296ccbb681a36dc759db1225d5044dcff3013cc6c7b47a4e431ed1af1ba16f3a308c66c08767d0e49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083

Filesize
53KB

MD5
d1bdd52e88e95bc2fe83cc6493344a0a

SHA1
76208136fb5a1c0d365c1b3ff2f0a4512f4c2920

SHA256
207dcf21aa02473c04dc8f667ffc50d47b3d96ce5e4dd6b61026845d5b5cf4e5

SHA512
908e565592077ad025918aff7421c62e552aa573ee56edfd071018ec9b15cdc61f12e7122a1bc043b61f74d818a9001615b5f77f11b46202349c1170f0b94568

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084

Filesize
61KB

MD5
9c3c25a1ab76865b7c60b1d30cffc77d

SHA1
3cc2502e7b0b347938fc034011d181059ac08d76

SHA256
425e3ad6a273dc91c7e1d7ab765a2e070339539326b067718493288d080774f2

SHA512
ed44319d97f59d8eceeedbb51f89b2870cd65e6f7231adc8dd57f965ce812110dfa9970a35d7a6562d7d52ae9d20076414702fc322caff4fccf4610f1e66e75f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085

Filesize
46KB

MD5
b537642a864c9a5539d018a79a32ac91

SHA1
5420f03859b60b44ab29923a104ff106e33efe0f

SHA256
ed786efa291471799a2dfaeced057dd9448ea917ee313f32d26e93414c53191c

SHA512
9dfcf9c38e3f90ca8346ba4c168e1833bc7dcdbeb4bad86e443fca7c7fbe914925953cacb5f7659e8d4d51ea35842b48db48bbea9e473be08f4819549d27b586

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086

Filesize
174KB

MD5
3a8e1b6fb817b8fc825091c8e63af670

SHA1
840a6934e8286480d37159c76136311e954fe7e9

SHA256
9d50f5b3d88fcae04ec32060414c980da604e05974f54acc7893c7f349cb0bfa

SHA512
b026821cc237e6a3eab8840d83491630edaf44fe128aa0f612e5c8d3c54a98bbd562b60ed609372f7c05740b714ad4fad1cd5dd2389553480a2c6aad8c0d208a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087

Filesize
74KB

MD5
2a1def54d76cf2f6f4f5daa62143b89d

SHA1
4d427cc1b110d2b121e9e67d3431c23adba549fb

SHA256
b4a56d96d22d3b2d960ebac36d042319bc39f2edaa1992de26ef3b34f1e32b11

SHA512
7c7902b8cc4d7f51f228d68aca796cb929c9c8289f8b59222096ec6d5a5f00a4672d62278cc71697d5a8ddee03e72f9244d5748ffb2b2929b696283206bb9029

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088

Filesize
66KB

MD5
e689da660f2430461e624264b0c6a916

SHA1
c583553ac6237117751986aff2e6264de7b84f02

SHA256
b5e0c68406a943806ae123d3453941f68f4f19cc9e2d933d285262faa9eb885d

SHA512
3c6617dbaf64db33224eef9482c3fade92f44259421687f57eba335bcd545e9dc1893a76a77f6a9a5805dcab0d03a32ac912fff98936782425e2018f92624d27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089

Filesize
42KB

MD5
3114d0758cd828fd983170150702bcdb

SHA1
69fb3ff32425746894a3e5207625c9ce3d637f01

SHA256
270a6cdaf743203a73130cec19abbbb1a988735f9c3d920cdea77bd3e5a884d6

SHA512
42a5b43d026491de8f0c98c9e506ef3acfa91a5a7493b1701e1604404ea93abb5b67b0cda48014473f131a408fc3d9af1b0b8c59d1a1429b89360d347bfcfa8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a

Filesize
37KB

MD5
31db84ccb5115d53a2e1a9528050ac9b

SHA1
de08475ee06d5c73172c5db5237930f047fd2d4b

SHA256
8a4777f237385da1488e934200a557aa50c8e4ae9fe7e7b64123bc84dfc58e0b

SHA512
f7e1ff9ae74b8d460eec871f5511a77207ac30f1594328857bc141b1bd20f4e9c5deaea3e677931ac05cfbf46c73ba3c03337f57ad524df7935d5e10aa938a7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b

Filesize
35KB

MD5
3f13883b995db6703aa6554244b07312

SHA1
ed765c373725807c906a5b64e59571d92b0e175c

SHA256
55ffca25d513cdf878a7a028acf86998e39e98ff12ec9b3892eda5c85b998f08

SHA512
f7b140b8fefdb3cd27d2813ae982c7f1cde87f22563f29225ff6a19744830dd4cc0e212d447d377be0c0a2a443e2377cef06ff6d9ae53e315e8753866660ec82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c

Filesize
63KB

MD5
7c6fa749347d6c2badb7615688143b1d

SHA1
20107106bf0a1acb7ae7cbb6b210fac302ad6111

SHA256
54777c8e8d5a3df9a09ebfc4b2ce34cefb0aa95017815e364977a6456bfab999

SHA512
dbfc72a5400768ba1835b7dcf7be200fee9669daa8cf80a2336f98c1371d8983cc3503826f951cb3281eb0b843764a2ca1b243e12e27d9b615f94d424f0f06e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d

Filesize
78KB

MD5
c88943554a10b4d4cc052abadb7c47df

SHA1
9835aa749ae2bddbcd40d8bef819aa9649d88bc9

SHA256
865434fe92e9401941b3952539b0d416cbbc38e186738e805563f0c593c942cc

SHA512
63456bcc47fc5b1b6f10ec406c566f122690ca3612befb67875e0acd8c3ed4985c71ec881f9e6e7a667d9672536dc7da54735a85dfcd933f713e89328532d44e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e

Filesize
73KB

MD5
229699aa0f70bc1baaade6c98092b0c0

SHA1
8c4acb9e5018c1b39e18d78608c84ee2c82eeafe

SHA256
dd8f76d1f399391ed887ef3922bd8beb7d91bb527e13cd8523739eebd0de5cd2

SHA512
0d574f0b89ea028aad32a8699900c4b29d9931e7fc6915be0925e1a17a8c90a101731f42f2b7b6d1063aefceb00981a68801985f9983527acee6913aed495003

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f

Filesize
98KB

MD5
ecf9ab6a69ea875b45b3b68cef5be676

SHA1
bfd93513312860ad2044cd86ca48946cd542fd58

SHA256
a3dac0d2a92a7ee588201b38f2a7a94b1856f806d437e8bb099892d0f258eff2

SHA512
985407c3adb1a9c916aa039eb4edcd1bc4ac6f0d5490892b458393ae070008155faae1c3de3d776fc99d4683f3923b44a207560d8af11a90aca29746ceea94bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090

Filesize
49KB

MD5
8991c3ec80ec8fbc41382a55679e3911

SHA1
8cc8cee91d671038acd9e3ae611517d6801b0909

SHA256
f55bacd4a20fef96f5c736a912d1947be85c268df18003395e511c1e860e8800

SHA512
4968a21d8cb9821282d10ba2d19f549a07f996b9fa2cdbcc677ac9901627c71578b1fc65db3ca78e56a47da382e89e52ac16fee8437caa879ece2cfba48c5a6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092

Filesize
144KB

MD5
f26197e161655948e6d6d4d48f0784a1

SHA1
6d02eac6d3ab869c195aee47d725b4d3850ef3c9

SHA256
11d5973d4ac3819f858eda750105e82f86f7dd0ec36cd077a8a3932a6593cea0

SHA512
11d14e4b1522ac188a718bc441185867cc43fcf523e6e4ebf7068bdaeaa46d494725fa8fa998481d9bacbf1b75c54045619865fab6860bc8ac7ae200bfa5295a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d

Filesize
801KB

MD5
903ce94e826b960978f14c5ddbd5efdc

SHA1
053e974ae64a0ecc1b6f86030e4e7e04498a14a2

SHA256
f74bbbab1b7a633160006e149ab9dc5c9e3014bb576a79eb33ec1464a1072449

SHA512
824a5458db2c1a885cb1095f2ba741f618dc97a735677ea24fa414dcae740bb885dd285ac339dcf50d2c6507bb069b582f79d0442c0ca97379d23fcd541bee6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\307a1fdf6313a72a_0

Filesize
288B

MD5
62b66f971a7c4a4ea5426b91f0c5b6a0

SHA1
6457b33a4916a6e70db71239f1447702e9cb206f

SHA256
529f80af3ce68869d3c27fefbaf9cbb78fb7b39607a474e284554c1e6445279a

SHA512
a396ce4602267532d399fdf54d10deb2aa73134756a3ee2adb56eaa8092ce9cd6fd4712c7b07346e1b2aecfd6d341cc9964c284025091998ec8636ddca814be0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ee9e5b73d4d7a235_0

Filesize
742KB

MD5
a7afbbc9ec7377e48eb8aa2f2b50fb15

SHA1
88ebe674bfb367adcc7ef39fceb1f4aaa94fafc5

SHA256
f5327557c29f28cb5476afe4317175a238ec0dfa155fce33db61319eafaed130

SHA512
8506d68e13c1c876bc6f0031164bd35bf21dd2f46bdd1f18a30ff3dbe43a8ead06895f313b980b1a36d66fe414b5e4137e41ca03143390c9f83ae47bc7ed69d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
d766d70a7cea38fec25b44639ba299d7

SHA1
559235c1bb8d8d042df08dc5d18faed866325c7c

SHA256
4f1f6536c85bfb26fbcf9b6ff3cf2f75fd665f8ced7d499da1211df795409fb5

SHA512
fa11b22308dba3ccc24311c28904f0d9211e61544dd81f48ad1bc2d657c2ad30546dce1829b4ad1775fe725b02e8c6864af12f1f124770e3d899bd7b4392d583

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
f642c6d6a60a5bd7fa4a368e80e8656f

SHA1
f7c987987e5d1a2b5ca75503982163601c871601

SHA256
b86757aaa54622a9cda690115480930d564b48f850af8b92c2d359d219937778

SHA512
67ebbc7f59eb41396896bf2a76ea32da9b2888fe24d9c830681144563c079dbcf0a34c070b49f1a0aea8f5946eaa2d096b8f20d3d8eb3aa1baf2f94b50154d7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
d7ebb3f81a3779386e9581deffee7522

SHA1
02dc021276c2045acb657dd4c22b697f646dd307

SHA256
2a9b14ab3f097cc5aca1f97007fb2de2ac4b084602549229998d0a0c1b21fa4b

SHA512
dbb39048cfe52b5a1b2f1a5bbf4d584f80bf5fa42d4cbe0e3192088d63cea7eb18b69d757f92854614b3c79c4548466288950ad02b18d291ce7e580b08ad83ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
bf7df442cc11b6598dcd2f9fe2ac7385

SHA1
5600e3014551b3204bd1f2cdc3d17fb4697f7307

SHA256
016033b8927ac348e838ca8161b434eb3347fcddeda661b5f38535e933b989f1

SHA512
a7ecf5071c8f9655edd8a17b9eecb28066370c30e6873b4ae1a3efb32d1644bea2a03d65c01a52cc3483692c47693c74ec1c60a73afc2d69a6c2ada64231c528

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588a97.TMP

Filesize
3KB

MD5
f63c46d5a60e4ecb968342d380016bad

SHA1
9d8d0313746ba491e97ac453d731a68b47aa5ce4

SHA256
6aae19bbbb8bac04af7d5ae90a556304ab110d1157a7f77a404c0045e092aa73

SHA512
8a21b52d0bcb9e58253a9b6fdde41b9eaf4382d399635fbf6922d82f66c223dc0deb97b724cc8fe979c74c49522e73df0bed4f0161878c5aea97e1bd78fa5de9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\_metadata\verified_contents.json

Filesize
2KB

MD5
c7182c4ef7a2cd6a57e48d44bfd4af9b

SHA1
2e1e4746da948d83baf4bcebee618784f8ab209c

SHA256
6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822

SHA512
d8af16336b66e4f264eda4ea68de4c1763a9c9b99635184d9ece67a9ed69a09bc1088bed254b3d2a8877ba3218e043065d1e4a06c20f18b58d312d93fb84bc83

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\filelist.txt

Filesize
134B

MD5
3bf6b4eae5af15288bf0d79702f9cb78

SHA1
b8a052dc4973757ae865661ea0300dea1d27f3b6

SHA256
543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b

SHA512
25e2502ad314635035f303aa1f0f195c28af91d0b51280e5a4c9310aae65aad857073137196f41a9a2fd7ef96e54ce9b329c448d5acf87b10134168ee7652c0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\manifest.json

Filesize
658B

MD5
2cf796650e5ad5bfb6c4a421d81734be

SHA1
79298d3cdd584b290d825d6fff4b857012e71992

SHA256
fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430

SHA512
1ee7604bd7293d6296cf1368ed0dadaad7359f4d00be75e7730a9704b2205438a06ba7361554437b3e6ef352482011a90500769ff713949716c24355ee742e33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\third_party\babylon\LICENSE.md

Filesize
9KB

MD5
e57b8dbca804bf4a2db759fa1a70b3cc

SHA1
8acc131b3698964249b08a0178f7c8c467337048

SHA256
4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63

SHA512
d2ca91851daeadedcda21ecee4cf7c9244cf21a15709e472014ba6a332a374cba80acd165b2650ce2c3994c7d0156376c22db00fe0c47833e0fca466bcb8c627

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\third_party\babylon\babylon.js

Filesize
1.2MB

MD5
e1adfd8f62854c2d9ce65f13268c1ac1

SHA1
d564ea1d59305bbec12995ee43f1c28838e82519

SHA256
b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d

SHA512
ffdf74b8bba179c7d5d6d49205b8aebfc7b27395852d05f1ae5de5c23b5dfbd87776f2046fad20b652a7663dacf90da0336a802985bad14ba3591bbfd9ca4caa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\third_party\typescript\LICENSE.txt

Filesize
9KB

MD5
f632dfdde0adc0da86f701c6f2df38af

SHA1
5a7612b4d9977a7e79f60e88df556b09a90df828

SHA256
43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a

SHA512
87722a2d675028d18ea276dcf18c24e891a0bad5f85f7387702310976d2fb8e1d0687321b0844b6c47947e6fbb489fe08bd1ffbe9772955ac7191ba4e274c8a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\third_party\typescript\typescript.js

Filesize
10.4MB

MD5
d931cf27eb964f239e5bec661810abf5

SHA1
1616508213014fa7cdb50e691cf737169019c6ed

SHA256
986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959

SHA512
9c2bae1025c1c9579e5e7ba8119e11bc298bbf968aaaaea94f12b8a96155f63bcdbce60deb1445c484aeef3fcfdf96156fc804c2867726617e7b772440989fb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\devtools_devtools_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
057f49e6bbe91581ec2425bf4fccd30c

SHA1
5c0d62f782e109af21aa1773455a00a6c9609d37

SHA256
c109a1854948dc72e0607c434b560f1454f53b40e60a0f8e560e437b65981ff5

SHA512
2d4dd50874244a1f1ad675ea3c838eecc31ab8c1c92ea81d13c9eb1bb1bc38f0216076974b53d2ae571c40251b98cf91b61048680d24f194c812310b1d77c53d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
038ef17e644fba2fb4cdd773141f2fef

SHA1
02f182ca617aba7627af521fcab57b9f5dd6b42f

SHA256
b3103064387ddb1c4037f876c7eb39306e74795c5db1a7aa4f59f87b42ecd078

SHA512
62e0c0d3d90711f84cab991321ab0c6e07f575de4f9394f6616dea47a50d4f9b66f8129c3b3d0051f055c53b5443233d9d1c2424e6c05af7c169e46df89e9ab7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
63a8b974b987587494e42f90b006c697

SHA1
3ee8d3ef1beec27918758c2c62833d9b2ce13e1e

SHA256
1df9a9dc560bca3ddabf1b9f4879153c4f1eab2ca98e16aae2fc997a45a7c0f3

SHA512
c5ebb5737c30c6aef492ee96c1436b34dfd45b8899baf38226b8f28b960d20063141f28caedc34cb476dbc8d3020f45605056cd2408b8cec939bd3b26cc4dea6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
a84af360aec36d64a3938525d97e6f40

SHA1
318997770c990d604ec1a06594f45a7ee4a49260

SHA256
f45e7ce2e90cca56df7f6c2c72be1c398cbfa2c05c7a76ffc2451dd6620ac462

SHA512
25ca5854105a756a635a977256ffeb094c00c4be78004c9586fc140a69a3e8a8bccb7fd0fc2e575fd1007233bdd0cb890b752ecf0b943de6b3ffaf96d1ba69b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
32KB

MD5
a5edbce4598d8e4e5b4c4107f8b31739

SHA1
f0420ecb948225815c5d2bd402736dde6ac65ecc

SHA256
d4e9c193dd7e177b653716f73c4adc3a27731e556c1e89a7678211280da03c45

SHA512
f92c508a301bac7de5a6b0439a266dc67cd7d61b01f8152d3ffdcdeff1a5cf4855d2b9ebe5d945a992c562150a837e5d0c81461ff9d2ee765bdd727d9e1e76e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
32KB

MD5
b9fe34519b9dffa35a8d8f24355acbe0

SHA1
39565542f6384a0f632010cfd567a756ba171588

SHA256
ee4180c165bfe76c8c92175cebadfd5cd1ba8edb11466699920f20d52f4c325e

SHA512
e1d5219bd8d18541e3b61666bd215ab448884792aa9a852fc5456431698ed55bc913927506b307501895e66e88c6562ac26f4e7cdc9b0485690c488bcb796b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
3b52641f0b4ef66cafab063dab784d30

SHA1
b46d729c31a9a55933c86a2bc5d074a56725c5a2

SHA256
0c47dbc00b198a41132c9636a09e4cf28ca481e9c3d0d5a75ec20d792c1862e7

SHA512
3a7fe662c443b54c8bb4d17fee619d16003dcd11d6ad8d0d1d58d5e4fb062a114c02b9149c4d785749c76e4a105e13a360a6d2572551e6eb6b37cf2d002be959

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
ad4c88006ec334809cd35db85e494d56

SHA1
7bd378920484c782a78e2d014d60770aeae1752c

SHA256
7faa4d66242fd6e2969f5bab1d429adcf63baae65607b620afb1100d5a5c98b5

SHA512
2de00fef349444ea0e00f2145260e3dce09a776c92e02e840b43b88728e8e80266eab63f473989f02b3d6933a819b6d162d5988ad70794af7f80788b0c02b15b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\060742b2-b684-43e2-9341-2fe63191d8cb\index-dir\the-real-index

Filesize
23KB

MD5
f84ae6293b7ff420741c0f7b80db5630

SHA1
e28b67f913473bd001533288d6857f978e372b8a

SHA256
fba0c005fc64805fd9027c999f2e94ec4532169eeba06d6b8a2c45de73f16e03

SHA512
58367dc8a1ff5070fb78eb4f01c461c90d19afbf4b934f7dde80f426fb6e17a7f4325c1e0e4346af1240cd17fc9137fd5af110bd00ac39859abac52c5b0e0f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\060742b2-b684-43e2-9341-2fe63191d8cb\index-dir\the-real-index~RFe5ba2a5.TMP

Filesize
48B

MD5
2a07062675538a9155b9283c687fe1c1

SHA1
5b67eb87c8747cb1f3bf93e5e68dead179174aa0

SHA256
7b60baf2988aa086a4122e8878e6949463b52704f42a264e14ad0ffbdd2a0de6

SHA512
6c85968521d468deb06be1b32fa78bc53318c0e016dc430f5a3071b55d44f439f4c159e31d4d0d2d70b30d66e99894f62cbd2a0baf05eb003be4be03b75076c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\index.txt

Filesize
260B

MD5
c9fb6b82f9440ea10028765e6892ed2d

SHA1
b1902186490878b786a54f79fdd9cb3d19193a5d

SHA256
1f17d87808e54d9f10f724f2ecf703c279e853f418019c7e05d40b7251ef602f

SHA512
83b7d1d797d2cd45f7f4d3017157aeb4f8678e9689e1c24e9aa7b0ea14f424993d93bcbc9f4abc334ba52dcc7952cd91af67920e73c38bf52003d4676e52c528

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\index.txt~RFe5ba2d4.TMP

Filesize
264B

MD5
24e9da823fe3b58531be7e35f134816a

SHA1
614a7098661e290721933317b387244db5fdf517

SHA256
ca039452019a51ce55a8f5918cc64cf6709a9580056dfd998d3fe1e90713b718

SHA512
4e369c589be0773c8848eb87fe42a6a9fbb08f00f57b404ac3a685ff5fd8a9adef0b3ee48aa0e8a405c9181704a476a6de2c948ff4994cb6ba35dcaaeed279ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b063b10c-aa74-40e9-8097-2e7a6b21975e\index-dir\temp-index

Filesize
2KB

MD5
4eb69a8031a97c0c5659ce8be66f7528

SHA1
fd83ff884ae41757c11f15be47bdb68cae84dc33

SHA256
215c5496df8f6dd2c1cbd89aa4762e096207610ad374d1ec67ff94ee5c7e9c36

SHA512
5541803c3e834e86e21e7005b64bd4a94b80386a0af02988a03c8f61cf35ea208a90bec21e119fa3edecd156e771e975852b9e3fb7e48c4e595ea73b359d19ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b063b10c-aa74-40e9-8097-2e7a6b21975e\index-dir\the-real-index~RFe5c0363.TMP

Filesize
2KB

MD5
e6084e7bb88563b8de028bd0f5eaab1d

SHA1
ef962262e8bdf8d85e4ccbb484c2b4f58fdfd0c8

SHA256
75fa5bdcb71e32cc4cc6d13af76512a588d958b5d7326c0d6f57f6cd971f9211

SHA512
74d85725be7b9bb0bb65a3db4faba7bb9947b023fd28302e56302b8a634fefe9d2495a5df55ff42fb177332126dc87b875da196539c9e87375a2e9901e40d945

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

Filesize
253B

MD5
15e0fc2cd9fc0fe0322e929f19ff6947

SHA1
71841ee3d0ad2396747a36a4390ae3b14360fc61

SHA256
4dda7bc334b8c118cd78d3252cc36b1107d0ed91a039ed6edf4bc8c77bb00578

SHA512
dad2e407182d1e4f0cc2dee4b727c38749a158bb00b1e1e8d6149d3db9d5d243f319b6bd50a7cea460e043e659ac718fc543be2f68dfc06429889ff2e6433b94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
264B

MD5
3037c6f2492b73f2ed9fcd14386a628e

SHA1
e02555a3bc6d5e3557c99b65e8ac2a6b6cc7098e

SHA256
92ee241928cee45029723fba2c5f576b0e365e7f77745f755e14886640916e69

SHA512
d59299ba2d318ae16ceb3a18aab6333ecab7c9bfe8e251d44b0b4fa2bb71b54a5705e41507d1cadf2b9d5a9b20f41c2b0d1ac66888a3cc5a154458106192df75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b2893.TMP

Filesize
72B

MD5
e848f7a0251e07aeef6a330a2e637a06

SHA1
fdef117d042f1c34cd1393c3af78ffd3c50be209

SHA256
16f07c24a3d8a220a814fd46c701b8aafbb351a97149fe989a7d241270a675b3

SHA512
6802ef26654b9810a156dfc061404e9ae63ad634e5dcc5edeae9ffd5c66e83675c0d6a353b1da4272d591ec6d245f516164c03481c914f9ab9b5ae331ddf0a44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
22KB

MD5
c485977626f030696d0fbd15bb1e7fd2

SHA1
cf2360a3250b5fc616977b5b9de58431596ecc22

SHA256
a36b71dd93fa9801727ac275f2bc85152b84d79bbbb8345f360ae5b9544b6f2f

SHA512
8d1b8d19c6a1287eecc1d0aeb254c67563235d9f88f7dff4cdcc3109b282bb8e3a2d80992fcd992a010a2499152a48735a6d42a52e48ca5bdc07bf5fa652c812

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.3.10\data.txt

Filesize
113KB

MD5
60beb7140ed66301648ef420cbaad02d

SHA1
7fac669b6758bb7b8e96e92a53569cf4360ab1aa

SHA256
95276c09f44b28100c0a21c161766eda784a983f019fc471290b1381e7ed9985

SHA512
6dfa4eca42aea86fba18bc4a3ab0eed87948ea1831e33d43426b3aca1816070ecb7fd024856ad571ca2734214a98cc55e413502b3deef2c4a101228a7377e9d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
469B

MD5
3a691083eea3e7491be19a9ad3ffe8a0

SHA1
59e46b57371d9a67d957c6a3e33f5c3f7db21a79

SHA256
c0a05c023b7c14a20f67de00045441b065b375ee3cac5842f6146d44c4aecc17

SHA512
872119bfb228ddcb0a2cca17e840ef95eaf847c4672d95dfddb0713b5cdee25e60b724589d45fb09781c17d9ce7b11389bb50f61b87e3d541772bb1ab96b2c92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
23KB

MD5
42d6bbfa3256cb7aa1a20282cc714abd

SHA1
24a2f7a0cb9e7ab33c3a5dbbe78dcc281c3f1992

SHA256
a6fcce86a2b126c61fba2ac55356b5c634a9110c677558fd9af28e6173245151

SHA512
5c1eea66c97a8af3c569d3e736a99489ade808d25bbe8c67ddf5aa6af453fd5285f11e0da4f79275a35fe4d16ab38a6d6b5845668cc3996d7a5e11fae713da4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
904B

MD5
a3b405177725a0fb74378c8e899b1427

SHA1
b91e462008948ade53f91dae272ca2d191296d27

SHA256
c7affcd1b30898998ed8cbff7af8c4aa74e7e2fe7d4000f3d6a5cd9374c68f6e

SHA512
b05ecc7d0af8de723800f40fbef4bee7cadfea895f484ecde708d8b541682e106ba6298fc01eb4164457b02105215aabdf8e8ce2f014b17f0941990e6d2d9af7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig

Filesize
19KB

MD5
41c1930548d8b99ff1dbb64ba7fecb3d

SHA1
d8acfeaf7c74e2b289be37687f886f50c01d4f2f

SHA256
16cee17a989167242dd7ee2755721e357dd23bcfcb61f5789cc19deafe7ca502

SHA512
a684d61324c71ac15f3a907788ab2150f61e7e2b2bf13ca08c14e9822b22336d0d45d9ff2a2a145aa7321d28d6b71408f9515131f8a1bd9f4927b105e6471b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18345.18340.4\json\wallet\wallet-checkout-eligible-sites.json

Filesize
23KB

MD5
16d41ebc643fd34addf3704a3be1acdd

SHA1
b7fadc8afa56fbf4026b8c176112632c63be58a0

SHA256
b962497993e2cd24039474bc84be430f8f6e6ab0f52010e90351dc3ff259336c

SHA512
8d58aa30613a2376ccc729278d166a9b3ec87eca95544b9dec1ee9300e7dd987326ea42d05dca3f1cc08186685f2fdaf53c24fd2b756c1ed9f2b46436689dc74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18345.18340.4\json\wallet\wallet-notification-config.json

Filesize
804B

MD5
4cdefd9eb040c2755db20aa8ea5ee8f7

SHA1
f649fcd1c12c26fb90906c4c2ec0a9127af275f4

SHA256
bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd

SHA512
7e23b91eab88c472eec664f7254c5513fc5de78e2e0151b0bcc86c3cd0bf2cb5d8bb0345d27afdd9f8fcb10be96feaa753f09e301fa92b8d76f4300600577209

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18345.18340.4\json\wallet\wallet-stable.json

Filesize
81KB

MD5
2e7d07dadfdac9adcabe5600fe21e3be

SHA1
d4601f65c6aa995132f4fce7b3854add5e7996a7

SHA256
56090563e8867339f38c025eafb152ffe40b9cfa53f2560c6f8d455511a2346a

SHA512
5cd1c818253e75cc02fccec46aeb34aeff95ea202aa48d4de527f4558c00e69e4cfd74d5cacfcf1bcd705fe6ff5287a74612ee69b5cc75f9428acfbdb4010593

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18345.18340.4\json\wallet\wallet-tokenization-config.json

Filesize
34KB

MD5
ae3bd0f89f8a8cdeb1ea6eea1636cbdd

SHA1
1801bc211e260ba8f8099727ea820ecf636c684a

SHA256
0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d

SHA512
69aff97091813d9d400bb332426c36e6b133a4b571b521e8fb6ad1a2b8124a3c5da8f3a9c52b8840152cf7adbd2ac653102aa2210632aa64b129cf7704d5b4fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
49KB

MD5
daa38d1fd31a217ebf323e2ce09a511e

SHA1
9e17b53e2f9443a8e60e5060f5dde9a786e6ac04

SHA256
e5f3123f59947b8d907bc134aef2fc1c03f2d6d4ae6170292c977f11965336dc

SHA512
bc90d262f2cfb0304ac572950ef7f4ecfb57fb55b8f3e5f8ab55f4ca553f9e9b9834a82030aadcbd7407e8a5e88888e1744d87e1c735ccbef922506e559bab89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
55KB

MD5
2f18085ba3f4f69ec538237fc6d046c6

SHA1
7da4c0f82995a17b5d4a91703ac69eb6e839ab06

SHA256
a0000b20ca7f8232e8986162517bb90e7aec7b1b08836d1b9290763c4210592c

SHA512
b9e977dad34c6c81f1e14aadf2c06bb8616f574e8a640a64e651903bed6c836931d705e184356150498d30cc29b098a68330632b6dd91d3640b4538a47292bc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
55KB

MD5
bcd3394f832d083fc7a2a4cb28055f56

SHA1
8c3f4b78dbffef75892250efc26eb0adefca64f0

SHA256
095eabdd73a67b297be47116da26748031055214d4dba085eb7dc6bec97d1e3d

SHA512
8cb21cddf1e46e1774171ebdcdb84b21dd63ae6af80df0eaabcf902d724b6efede4d95685b63d5e66e275dd7db13600e7eccc2b359ddbd3b25c135f197140fb4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
ff0a7d96ab8ea8788b107d3e3acd4b0b

SHA1
5ee82ed8ec0292303bd304cc4409dc63bd5c0e3f

SHA256
5613d46e2d73314a1adac6ca717d8c5823a5b8bd040a45c19e5b9ecbcc9cc4f4

SHA512
53c599ba8ff9c037fb0374bc933e5cdb55ee61b06a9233dedbf86c72002e6e65d8646d7a695771eb8578176b700e790c7d2695a8f303af124eca2407f904deeb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
1b692a4407a2be38aee5648eddbbcff8

SHA1
04e8ce1123450c8d8379ce1ef1007b8ac678dafe

SHA256
5b94b716117cf84058db66224413adf9ef6535d7ed4f7826dc9c158c5fc8615a

SHA512
6e5701b3c6914f5a8d3d57b8923fc63a404ab475bce256886e0956f478a97f8f12811f4f08166dadb64b3ef2e0eb571faf6e577cb4500e178477e4b2a0924c39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
20e4416ac0e5482da6e517ddd6e11dd5

SHA1
5bce373bdd1d3c64956d13fa621c4f722a53f849

SHA256
5815a56cbd0bc92fd91f3cc59a4e019036edda33e42abf05298d1588ebf53283

SHA512
411d49239b9e908635e37b9bf6be37c781bb22c6ee08d3e2d6865da80b6d28c82fc777f1f100fd99652dd07ddc3a5bbbf366f145359e334da6246a5ec5beb90e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
bbf82366b50d8e5872ab5e9f0fd9bf9d

SHA1
6fe8e78b28874f888f9124f91547fb1b4667b096

SHA256
974ddf9348c909d47db99421a323f4f7970035ac8376a74f4b60c7dadfbdca38

SHA512
25b000691ec8253702f8a577c3318458ef8cd2ab9a8f114749810f5c4e457379cb5e95b377384369d726effae82e28f7673218415bceec3dacd9cee527005255

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5841e6.TMP

Filesize
392B

MD5
0bf6fce5b2621cbff4a0589b100efe13

SHA1
9f3f9e2a4f85a76db6b703c28bfe0ab3c15be772

SHA256
83a05a06df9cb6447b5505cd1f22181dd9b6ad1a7be9e5103fccf83423a7ffad

SHA512
40a87d6e8be31083827c490a09685f0172e8cf6afde6e3e9b6ea5f002be7cda40f4883b244742491e229424452eeafbbfee6a0a83a2183c96566db94f04e79f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.57\Filtering Rules

Filesize
1.8MB

MD5
d7c9c6d2e1d9ae242d68a8316f41198c

SHA1
8d2ddccc88a10468e5bffad1bd377be82d053357

SHA256
f215127185b2ee6b01e12b6ca75d3e5c4e454598dd4aed36124ae13d59afd547

SHA512
7fd14824e9200dd99e1fd2cee402656dc0cfc3d0a60058c5eb05c68e9e65b7f0b47e550fb4d6c2b59eba204dbf3ef9e69dc9723b43a9b3ccd5412d6b77715fc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.57\LICENSE

Filesize
24KB

MD5
aad9405766b20014ab3beb08b99536de

SHA1
486a379bdfeecdc99ed3f4617f35ae65babe9d47

SHA256
ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d

SHA512
bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2025.1.17.1\keys.json

Filesize
6KB

MD5
bef4f9f856321c6dccb47a61f605e823

SHA1
8e60af5b17ed70db0505d7e1647a8bc9f7612939

SHA256
fd1847df25032c4eef34e045ba0333f9bd3cb38c14344f1c01b48f61f0cfd5c5

SHA512
bdec3e243a6f39bfea4130c85b162ea00a4974c6057cd06a05348ac54517201bbf595fcc7c22a4ab2c16212c6009f58df7445c40c82722ab4fa1c8d49d39755c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll

Filesize
572KB

MD5
f5f5b37fd514776f455864502c852773

SHA1
8d5ed434173fd77feb33cb6cb0fad5e2388d97c6

SHA256
2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e

SHA512
b0931f1cae171190e6ec8880f4d560cc7b3d5bffe1db11525bd133eaf51e2e0b3c920ea194d6c7577f95e7b4b4380f7845c82eb2898ad1f5c35d4550f93a14b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
8f6e10f015eaa420ea3e263b81c29dcd

SHA1
7d5f3966fc2e81160fb97ace3b99aa69f1a4a02e

SHA256
39afecbecdcb746771227d9ab5e3bacdd40ad52d9360bca0baf0be6b0651dab0

SHA512
88ea04b032c26c25e36ba21f1c2a9f974c8b78fcbc0fc50b7806cc7421f65aec0070d908c473ad432329f9c44eff7ae2065bd85fab5c432f88bec498a9bb82be

Download Submit
C:\Users\Admin\AppData\Local\Temp\9cb62f4f-fb31-4e85-88ca-4699eac6799c.tmp

Filesize
2.1MB

MD5
4cd67032e35fa92f5182df10df289906

SHA1
9210bfc66bd808ffcd7c6443e160dc8d6754c416

SHA256
efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07

SHA512
f3d83f6e77e4568d2dae539c95acf0a886926a001b4d80f0ea602387530fc333f688ac031b3057e1c2b0375426cf47ae33315f7da9ffaec601102be0bb7221cd

Download Submit