hxxps://gta-v[.]en[.]softonic[.]com/

Analysis

max time kernel
84s
max time network
79s
platform
windows10-2004_x64
resource
win10v2004-20250313-en
resource tags

arch:x64arch:x86image:win10v2004-20250313-enlocale:en-usos:windows10-2004-x64system
submitted
30/03/2025, 04:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://gta-v.en.softonic.com/

Score

6^/10

discovery motw phishing

Malware Config

Signatures

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
455	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	3836	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\msedge_url_fetcher_4464_1363917851\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_90_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\bg\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\pa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ne\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\gl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\te\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\cs\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\eu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\mn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\sk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ar\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\sr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\de\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\iw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\dasherSettingSchema.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\lt\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\id\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\lv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4464_1582757796\_locales\fi\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133877812870982547"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3446877943-4095308722-756223633-1000\{26AF39B2-1518-42C0-9959-B81ABB758AC4}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3446877943-4095308722-756223633-1000\{4D962F84-E16F-4EA5-A019-A4F5CC8271A3}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of FindShellTrayWindow 28 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of SendNotifyMessage 26 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4464 wrote to memory of 4356	4464	msedge.exe	86
PID 4464 wrote to memory of 4356	4464	msedge.exe	86
PID 4464 wrote to memory of 3836	4464	msedge.exe	88
PID 4464 wrote to memory of 3836	4464	msedge.exe	88
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 2820	4464	msedge.exe	89
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90
PID 4464 wrote to memory of 3368	4464	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://gta-v.en.softonic.com/
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7fffc372f208,0x7fffc372f214,0x7fffc372f220
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1936,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2280,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2628,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3476,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3484,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=5112,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --field-trial-handle=5232,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5524,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5532,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6048,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6348,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6348,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6628,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5368,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --field-trial-handle=4352,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --field-trial-handle=6808,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --field-trial-handle=6868,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --field-trial-handle=6692,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --field-trial-handle=7068,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --field-trial-handle=7836,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --field-trial-handle=7860,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --field-trial-handle=7876,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --field-trial-handle=7892,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --field-trial-handle=7908,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --field-trial-handle=8204,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --field-trial-handle=8248,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8388 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --field-trial-handle=7536,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8428 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --field-trial-handle=8544,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8644 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --field-trial-handle=8864,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8880 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --field-trial-handle=7900,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --field-trial-handle=8800,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8660 /prefetch:1
  2⤵
  PID:6224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --field-trial-handle=8232,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8668 /prefetch:1
  2⤵
  PID:6404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --field-trial-handle=7988,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8696 /prefetch:1
  2⤵
  PID:6412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --field-trial-handle=7180,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8592 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --field-trial-handle=5348,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:1
  2⤵
  PID:7132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --field-trial-handle=8520,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:6528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --field-trial-handle=6656,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --field-trial-handle=6700,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9140 /prefetch:1
  2⤵
  PID:6168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --field-trial-handle=7248,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:1
  2⤵
  PID:6420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --field-trial-handle=4952,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --field-trial-handle=8508,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --field-trial-handle=6212,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --field-trial-handle=5164,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8384 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --field-trial-handle=7072,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --field-trial-handle=8848,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7216 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --field-trial-handle=8356,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --field-trial-handle=8008,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --field-trial-handle=7756,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --field-trial-handle=7788,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --field-trial-handle=7936,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7748 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --field-trial-handle=8276,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8712 /prefetch:1
  2⤵
  PID:6432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --field-trial-handle=9232,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8936 /prefetch:1
  2⤵
  PID:6160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --field-trial-handle=9360,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9364 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --field-trial-handle=9484,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9236 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --field-trial-handle=9640,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9200 /prefetch:1
  2⤵
  PID:6308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --field-trial-handle=7780,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9824 /prefetch:1
  2⤵
  PID:6596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --field-trial-handle=9504,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9844 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=9532,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:8
  2⤵
  PID:6864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8604,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9076 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=9088,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8184 /prefetch:8
  2⤵
  PID:6884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --field-trial-handle=7828,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9056 /prefetch:1
  2⤵
  PID:7120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --field-trial-handle=2904,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5720,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5720,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --field-trial-handle=7984,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8280 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --field-trial-handle=8292,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8448 /prefetch:1
  2⤵
  PID:6228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --field-trial-handle=10016,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9956 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --field-trial-handle=9580,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:1
  2⤵
  PID:6932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --field-trial-handle=9108,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --field-trial-handle=9096,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9132 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --field-trial-handle=8952,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --field-trial-handle=9668,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --field-trial-handle=6612,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --field-trial-handle=10032,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --field-trial-handle=9388,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9440 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --field-trial-handle=9320,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8948 /prefetch:1
  2⤵
  PID:6172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --field-trial-handle=9740,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7872 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --field-trial-handle=7120,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:1
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --field-trial-handle=9704,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9476 /prefetch:1
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --field-trial-handle=4832,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --field-trial-handle=6268,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8360 /prefetch:1
  2⤵
  PID:6552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --field-trial-handle=9844,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=7556 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8984,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=8756 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --field-trial-handle=10132,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=9788,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=10272 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6052,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --field-trial-handle=10344,i,16508093389171941243,4002368357646734276,262144 --variations-seed-version --mojo-platform-channel-handle=9440 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  PID:4316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7fffc372f208,0x7fffc372f214,0x7fffc372f220
    3⤵
    PID:6268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1908,i,15191960455667287456,10610149429853189908,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
    3⤵
    PID:5068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2244,i,15191960455667287456,10610149429853189908,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
    3⤵
    PID:3576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2392,i,15191960455667287456,10610149429853189908,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:8
    3⤵
    PID:6276
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4420,i,15191960455667287456,10610149429853189908,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
    3⤵
    PID:940
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4420,i,15191960455667287456,10610149429853189908,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
    3⤵
    PID:6388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=2848,i,15191960455667287456,10610149429853189908,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8
    3⤵
    PID:7016

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:2540

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
  2⤵
  PID:2204

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4f0 0x4e4
1⤵
PID:4460

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:1620

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
d062a75afefbe4561b422059bc209a8d

SHA1
cb92e3a8ca6188b625f19fc3de3c84b78a49498b

SHA256
6ac1fa36f87234612180e9de594d2320cdd100d02804fc04a9d4ce881a260fda

SHA512
6503b4c620beceeac5e716736d5639b20d071f127b28d0f695fc1892834cbcd0c126857e8e4c6bc4b37036c884b80185522fe8c01589195f860f7a4ef0d338b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
e253bea29f0f62c9ab05558dda184adb

SHA1
e170f455442403f97527a858635ec6d203322170

SHA256
60634dccac090897b450848ec4597c57c83161ad6fb4a6ea12bb85388c0e31c5

SHA512
43775b588d593e989e95ea3ee37a7660b5f209bde8517baa7c6a6870b9095584fe77e5d504c64dcc77c0196c96ae24dcd531785d8f87cf330cebd599a4a97461

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
7b0736a36bad51260e5db322736df2e9

SHA1
30af14ed09d3f769230d67f51e0adb955833673e

SHA256
0d2adfd06d505b9020c292d30597083d808bfd90ddc0fe173def5db96832a087

SHA512
caabdc6a8601b93f3c082e6506b3c9efe2242b90e92e86306dc0bd4857d33343ba395325fabb21f5db562d3e3932f52f77de547f379072d0154efd5f1b1cdeb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\706f8010-a61b-45b7-9fb6-0970dee42cb6.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f

Filesize
20KB

MD5
5ea70ceec4d5d2ad3c54154486787cfb

SHA1
49493b9e952fffe961fb24eeb86c32a326b41f45

SHA256
5dfdf6803a3730aa2b23de58e286aebe03e542b5ed1d116e5c79fb274496961a

SHA512
b6389108124739c59dba54db6c35ef85a7593a2650620082fab3e48eeeb0df8f0de2865ac259d3f55cbda6a82525022db0080ca3df3829445db28ab25e769098

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070

Filesize
17KB

MD5
29b8ae1d50ef8543dcebf4e9f53089ef

SHA1
90297279de99683b3903534459bc9962924d79fa

SHA256
2dcbd24e8f78b008251a1a0499c981a79be59fdf154ff9938a28ecb7e64cf12d

SHA512
6de295089b62bd50ff955c2e381be6bb0e59b1f0776946c5d3b5109fffb84ee2a673f49d2d5a56e5600d3b09fd8e9cecbcd0e677234a6f96c1194dd1e1c27c94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071

Filesize
20KB

MD5
b30f82421cb38e73c0311b00edde7793

SHA1
706b493febe99d9572401dbb11d7475eedd007e1

SHA256
e3ee5ed4f65a7ce1faafe6632786ce889f52dd28d5ec52eae58983edcae3f5c8

SHA512
6112857a055a0223aa40891d440e84945296ca60469a57c9498b02baad2b1aac1cf1fe03ecf4f371c7b98729f959f4e561a68f5118a89174ba3d52d0a91e2481

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072

Filesize
16KB

MD5
bd17d16b6e95e4eb8911300c70d546f7

SHA1
847036a00e4e390b67f5c22bf7b531179be344d7

SHA256
9f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352

SHA512
f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073

Filesize
102KB

MD5
94d5de365c174f2ad26516e3e5703197

SHA1
cfb6361d41e21e63c3a3293256570460f5f6f845

SHA256
c337c3645ab78bc0ef707b04ed51d41c8a882f4dde7a1e13b9ccd7be23007bdc

SHA512
29adaa105e23cacfbbadee2b8fb1d96729806a71bf1c16bf53aabcdf0eacb86e4e5180e89e07e96dca5354f809ea47e1d4146ed9f7b3a0c3b4249afc1d28028c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074

Filesize
145KB

MD5
315ab14db47c52ec45069ccb052077c2

SHA1
865ba157aee9aa207f1111bfc0a16d6a395d59cb

SHA256
8ceb5d4de7f1c5527e1462f79c61340d380ccc7426486969babe42783b90a916

SHA512
42171230b381a1c398cdaa39d818c097eb1fac03590479f5491c7caadc2abb49eb97250b00b7d3704c53a6a7b28b83fe72ba5863fe65c55fed2054115fa378cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075

Filesize
32KB

MD5
7d8fa452ac2d6b50099a364241f555e8

SHA1
cb0bf566c65dc700a2b1f74a468a47c939d219e3

SHA256
b4e8421faf671c84cae89786b15231d31344ebb61cfd87b0a3557c7f5d519da6

SHA512
4aa4f8af49de793823a5be845cc8b43fad3b1bf78e572978d115889071d92666aec3b2fb61d77d736032c19460217d88be7f3487a37cd19a6ca6b61a3a06ae12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076

Filesize
16KB

MD5
11825cf6da869d7589201092299231bf

SHA1
b650151674a230700dc66352a0f002ad5db6d195

SHA256
2f315c341e2ff775fceede3d1b5dc2f8124a866a382a2c30b760ac6c2abe7bdd

SHA512
e5902c14769efb05fa457dcaf62d4b0d126cf3b71aa9be596e3609e1b63f83d6bc2ab3d1aed9a077a6fbec3e7f6a633b3d0b1a8b77d7d0161af60ed7d260a6b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077

Filesize
96KB

MD5
1fccb9ea76421ef17dadd504541baa2a

SHA1
837a7e1deea231e4302093aee156b921d7055dd9

SHA256
04489f1dc171bffaedc24175a3987f0114752f457fd4631d0c5f8e045eb27d58

SHA512
9a14f3f0e810cb36e37b4a5ea1e2c65e2230ee32d682dd5c964c9e976f289525fd0a7c2f77f7b07a7fccb1a5a8f79d01870c10c42cdeb877da237bf9b2391166

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078

Filesize
103KB

MD5
5b3628224127c88c84a28f6482d5c4c4

SHA1
0a8a2ac08e43ad5dc7832093f88ec0e2f1048e9f

SHA256
0af91e44d8b4a1e8380f0634edceef078f56990fa62e5538e315638208ccf526

SHA512
83b2dea7204f79f9eb11f6f24b187e559a39c5956a02e8a5b361820ee52ed4bc3c0c51e787ab40b28d4fd2743fca7b899225397a38ed900753e4df82c8e91639

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079

Filesize
42KB

MD5
23d5f558755a9d58eef69b2bfc9a5d99

SHA1
fa43092cb330dff8dc6c572cb8703b92286219f6

SHA256
6e5bec69b1c6424972a7f5481ac57049811f0f196535b707613126c11292c5cf

SHA512
9c56c94d059a27dab9f69c9dfd718382a8eb192b8c0ce91cd6db6ec0769b8756acf9c0956a35561474b87d6278b13fbe88a6e4df6260c278b1ae06e9be55dd6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a

Filesize
73KB

MD5
c9503a8859a0defa39c6c0bd0acd6687

SHA1
ee4d9bd4d3d00d065622bb15f62c1928c39d57d6

SHA256
9615bc2b063044e8a05996815548a27963b1ddc0c836d784e4c60e48876b8a98

SHA512
16384fa5ab2f95f60a1125e4451c4281d86b6b90f442d7cb6b8a833f798a61f105cd8c6b07d3a541e40f65ad5074358d50b46680ffd5e2343582127f464f774b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d

Filesize
17KB

MD5
bcb5e81959937e8f40c96d686764b2f6

SHA1
d8e95e36d01d80d43237e58c562bd9bab396df32

SHA256
0ad7a5b1849ef6b7c3d03df34377c60cd91fbf5b9ba3874f27a5a66ff257678c

SHA512
b39718941c12d10a276d4431f24902ca078fdd6d3b193b5159bfb29d1166ba586a060dd485220029cf501976bedff7b9873d17eea5cacc363774cfc409e99e86

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e

Filesize
97KB

MD5
8a812a33357f0bb154a82f3511d14579

SHA1
5d3e5b1d502d5473f4fd8159cc23accf369b1e93

SHA256
76670f0b2f5f2f3fcba39982010ca0700fc2a07007933245cf98f2d33a1936f1

SHA512
10b481559125a278697ebfb1285dbe246c63e012a5e1adfd5eae5628830a15128b39ef429763428c29770433a09a15c80de3fa8b2777773b76605a73af5c12e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f

Filesize
165KB

MD5
ba0702c4ced5e394d82b952997b4c0d5

SHA1
3c4088e0fdca5da192307d529dd8f326987dd61c

SHA256
f44d8c4f808bd6835edd975f9be5c810130e74c38d7a11e02550f350ca331b46

SHA512
f92a78f90b4b58f05c732899318b6d79b2f58df610c0915f38b79c89e2d9ea12427c553e7499cb4d553f94f511f1a95d19b135956db45a735495492046c89127

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080

Filesize
97KB

MD5
6899f3e033e9b553c706a2a232391aca

SHA1
0560cd70282bdea30ea670e0d79de56bac1f1d29

SHA256
0efd8bd4ce80faf409a0da101866682c7700c42b438ee252bf67ed9523a76da3

SHA512
a4d8dada0ebe7da0ea8768f878aea708b78c2e639ed6578129781f21e37a70b4030ab877a5d3d455abd5284759687e8ca6b4814c9befc6c4403d5ab4cc328cb2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081

Filesize
92KB

MD5
becb16286463a99df3e1911e63bb85ee

SHA1
bd6fc511d58a088fb0f266325d96be7be2b76497

SHA256
bdbeeab905c7985e05eb3fdc120597da5549308275820d21fd52f9e9af7334fe

SHA512
53075e7f0e06162185aee41e6205fc4084826a59f429d14ff15c63500760205a5c85f13ea4c59442796ae19065c3fc9be15b44207c987cc5eb40fd98cbe8c6bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082

Filesize
21KB

MD5
fdaac7c912846eb60cb84e62ed7b1845

SHA1
f22ea5775fd962644599362c911595b044080ecb

SHA256
50c7edc392384ad3b580d27304c969eb02375fbe40ca853b696a20abe5b0bc70

SHA512
31e62ee9ec1ecde3b70471c01e29e541a9778bbbccd1376ef9792ad9f5a022a74ef97b2eddcb0bee51f224f71f9c1efe00c89a2ec2a1bc88f45a699efa91d870

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083

Filesize
29KB

MD5
4f67bddea4a4b56fa44f7cfe3d8e17f6

SHA1
438d0068eea5ebebe51681e9a99f4ea32cfe15e3

SHA256
b12c446b6906a8955e13fba049813b7367342208f2f605e636bae8cbb7c2a847

SHA512
341ad30b36804ec19a0299e99e95ca576474ea85eb853f986f0e8199481e5e5f6826d71ed660f408b0dd7bce3e2d28e873e64799a24c5803247b7ab356a276be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084

Filesize
22KB

MD5
280d0dffcf08dedc8ce52f25270bf1e8

SHA1
e9566fd9372120a6fb9760a131f8919934954f35

SHA256
ed51e026d37d510820ca0b811d1f774fa8eb13ce09775c5a891853ca072fb58f

SHA512
1dd8a347348a3d211bd8f03c30d7dfcf160d62ade9c354dd9649ef4591c874bd466d864ac0aad454a0b0e01f1149c1c5a95aa365affbd7d81f79558c7ddc39b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085

Filesize
29KB

MD5
dd2277a6d1e1e954e5113e303f2bc02d

SHA1
548467e88248f2a0754448c8950f722b4d989d48

SHA256
16f385f9dc7dfad044bcc67f7fbb1f028ca125f6462256fd905e7c4eaa4b2950

SHA512
81ffd0411ae559ae25f9845293a09ccc5e49dd513366f9a44b476d1013032530a3b4cfd3eb0953a2f92acfa008da8fd1a036c1d1cdc593efa8b834da29d51039

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086

Filesize
59KB

MD5
876842ca6a563581d88b0613f24cd11a

SHA1
66f1e7120c86e5ad237010f60f51754dde177947

SHA256
beb5d66d8f007b065d48d07b282d45d8f31e7a5f8368a07413b33c6a52d14b09

SHA512
e8f1ffcc9f8966ec89e966eb6dff92b486b723d7c29ccd6d765424e0486b5c83ad580b04d1325c7b83eb0916e34c54247bf8acebb9cd6b14101f9b61a39bfb0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088

Filesize
16KB

MD5
e12d874ac0989d68be4e2f54b7c1c701

SHA1
cd07aed2fecc0adff1cebaa11d7922680fa9c9cd

SHA256
b466493506c843928d35af841ae8661537b74fc088cdb36fc4c248dd27979bf9

SHA512
6056ff4c4805cef5cba3380eddd886e52f0247701b4ecb1c3de74ce606aa913c949df7c1900bf6e00e61b920a9fd15622c6c7787f3665110eaf6dae8b04e884b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089

Filesize
28KB

MD5
564a80f06c5058cd19537375a47d2da5

SHA1
db5220e6e520a2011362bfe82a1be6fdb413cb48

SHA256
230a4ea452bc7ba039775d964e2de8a643a9fce5d9f74c25649a55031151d8ca

SHA512
fd617efe1dd3b9425648ea8ca5c7769c8e81e3f78caee6805b0671ed7681824dd135e90191a1195d5ccb8610b9056a07018483098ba473a507ecd100739d1c32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a

Filesize
134KB

MD5
e7e155eea627c002632a08e274761134

SHA1
a56aecfb59f9910b59866494434072c784b5220c

SHA256
9a76e87a77f0d971c5aad38bb4ba5644e0d63c45795ed180197578e92784de01

SHA512
062b64977db9b7838dcd8449d3427ab488098e8720cdc08f36bc2d1dfd62e978f26cff8d5282e807b4d90d0dc6b3725f1798829fcd8207e888e83a0f3f517076

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d

Filesize
19KB

MD5
f38c8b606cb650373b1c566449a7e659

SHA1
2c8ba870c882aabb5da60d168192eecb56b1785e

SHA256
9b6222ff794fd12f3b7b26354f77669bfd5c9481e91f044ca43a7ad0055ad699

SHA512
e5ca5c9e341c2eafa8f0fdbb57a0c0b78778173eb4e5582d8fa1916ed1c7bd2e7fdea536600c4a1cf0c1d998773d2903cd934c722ab9d7ca0df3170650012ef1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e

Filesize
67KB

MD5
60a30ef624fad5be472ee5d1acd1b2ab

SHA1
5dbb87bbc2e8a6143308e7928536ae778610794a

SHA256
d0ec8a13c2eb6a38d628cd7adaed308116164ceee003f816889b4db1735bfccf

SHA512
315e3ea4d4c6ccf6c14fc509933b01cb77c964b608cb95ce2ee8c331011adaf618e41cf4b8c499c4f6c9e137b88a34caaa7aaa44a69fdabed84df550e178d60a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f

Filesize
20KB

MD5
c87ca998f8c407ae4583a4a85e4f9258

SHA1
bdd76f02883b263b8809f80c0c95fa40ae77966d

SHA256
566e5ce128448fc2c3111c0a5b4ebee4d9cb6796bf470f650e9c9e6d1fcc4ebf

SHA512
544c8c258221c4e6b955cc0ec0150244cfa4c1a54001402108283aa3820cc42d8950272a46f7cd650ce9f32a0daf0b813b0ea58531413440922ef98d4300e1c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092

Filesize
21KB

MD5
e4f84b161c26eb468f92a910ecb6712e

SHA1
366eb6542e97a25c8b6992f71b63a876b98f840e

SHA256
de8190c4ac750bbdc88c82c2a17e8105f2ad9c533fc2dcb6c7f7bae6ec8bc50d

SHA512
736daeeae90d78cb7f5cfc8394c6f494789ccec21f7f06e8a7ce8b8c9f8f8a7b104b4628f0009164500272416efe6589c57ad0f50c810195cc1cf8e10939ce71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d

Filesize
62KB

MD5
022b25708e11ee781f8ba58697c9a134

SHA1
8ce2e1690491fbd3a07696fd55666c2ad6300322

SHA256
fcf8adcd7503ab0bbc1efb75432802c3a1854e67ad20bd83b9c4dac5934050b8

SHA512
651776c099c37ca0d1e7468fb8f25da631fb87a9ebea29d8a53279b984140a1977d54b9c282dc026d09775cf30879761af83cb94484b58d069edb9cbe085961b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e

Filesize
31KB

MD5
e997979733c0c7fafe4251d7679ed8a2

SHA1
72694fbcf563352d1eb7ecd0cbf529b61da9b547

SHA256
765302a9be1402d967aa723eb5c1af44c5d9bb13859ce4ee9192899d7b70a607

SHA512
e9d6007d780d5565407a48028e29ca5b1a814bdb329303f0cf17a386aeb42a89d00fdf0c502cd06122cd7ac9d16e54d967a4dd0c6020b44258c99d2eeb2f83b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0

Filesize
22KB

MD5
9f948b0c74bc82ac7483f864107f7aec

SHA1
9864ee6cdf16aa7c7be36f2c13028fd7921c4ea6

SHA256
df35f92de196581a75365da64ce7707975c8fbea3e4e200c112a9131d8e87ba7

SHA512
1ac7da3f6f54b1ae19bae7216e50e36e740edf8ec5a369b89efc343a18418a3cd3ba4bc81d09e0210a49ef2650704008eb30198131f9f0cb5351608077cd769c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1

Filesize
24KB

MD5
5dc1b0ae3c9a123ada1822925e4b097d

SHA1
971d962f6811724bdfcff90a939818dca58c0301

SHA256
ded60728cc8f1a354b12b88c191ae1ea84bdb13815fe9bd0263dc86e807999c7

SHA512
25a1ed2f3d26ed48ce9f83a1106258377c46e08523ba892d516e89ad4b58efcb42507980fce9120d285438c0028ab851ce65113b9614fbff7fab4f2e7755014a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3

Filesize
36KB

MD5
68c1776a1342c48d0a4468611beab70c

SHA1
cf2dada8169da7dc06d27be60fabc52258a18c77

SHA256
8744750605ce16115e2a15ad13cceb32e1a9f5672e7c1dd09d3ee4a18f1bc87f

SHA512
6c3c215525260c61814d7d372dd67fbc82af67edb47d2bf215e007e7f19e0e2ee13f1787249e723d443ac24d388faade88aa7abe80d5644cbc0295d807329e8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4

Filesize
18KB

MD5
000f566ba8c2753289f95006e6941ecb

SHA1
8cb24fef20fd0c65b9ebb688d24e694862648a56

SHA256
aa8a9432094c5c9ca61a9a9646dd225308af107f5399552f7699df59600302de

SHA512
4f975a34344beb582748e748fcc84764d07eac81958520a599688c807bb61615a958766ab7d168615001649e5f40700d5f32b8d92331f571a1b355ab25060632

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5

Filesize
28KB

MD5
1a314d8adece5c8ce0b7b99abbd42ac2

SHA1
a8cd32c8114100158ac388ec69b8fe44aab6a405

SHA256
8cfb1c5f59fe668830ad1d4d4eb45c585befaa8ab00c41c3d7d0edee4f228281

SHA512
a6042ca27c1af909503738e9d44109173ac6a5b4d7b32361f30c2d3e4cf70574ad753b20622632870cc22c9082f513a8634ea0d2920737855eb459a32d0835c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6

Filesize
45KB

MD5
b042b21b9792b06e60b4bfd12c307463

SHA1
322274e37f01d5822edd9ff3356d3dadefbd88b8

SHA256
fe425e622225dbb132a212428f0e2ca69179608da79f446c1ae05e6fa88adcf2

SHA512
120f485f384bb8030a74e1b96fc8aa3daf4114b94de2fbc4f468effff782830788ae14076ccf0e7b7fab6d2bd494fa6151609dafc56e8d1519fdc9900147e878

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7

Filesize
54KB

MD5
767e3e571bcf67332c06204b422ddb4e

SHA1
a548e73fae41fc2c3f8f4fa89a0a976a508fba8a

SHA256
954e3a6119cd96f84ec312acdea1ee4c6f40fdf6410fb0d5eb1e0d8791275b21

SHA512
8f970139e77de04f7448d8fb75fb24f2199bb63c569d5eaa65d4a8ef6bf0ef88ef1e6d7bf94dec3527f3d6e07ebcef2742769cb38b14da1179a3487ebb78aa7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8

Filesize
40KB

MD5
8abc6b33d7d474b7a99e0e80fb356875

SHA1
cfdde0db44ab813bcd96ae99203769553e669a3b

SHA256
b45093eec172fa94461147d1f289fb35435c68f6fc33d4d45a6148f1a1dfe6ee

SHA512
f8c21a91325b2e670b3a8ca5648b1cff495f295636686dae7599cf9775bb1df0b1fc6a23a73dd212ad684c8218ffb4155aa5b0cf6fee90a0ca8d4d795286bd30

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9

Filesize
39KB

MD5
9a01b69183a9604ab3a439e388b30501

SHA1
8ed1d59003d0dbe6360481017b44665153665fbe

SHA256
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2

SHA512
0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea

Filesize
1024KB

MD5
76fe40b207562e887e16043046d978df

SHA1
b6b00ee63ad26378f3562056bcc120afa467d20f

SHA256
030b32f9d32e9d1a7f394b916df49de51f014150565921fda29f981ba376cec9

SHA512
d47373d4727d9dd883fdb9a89e8fa2c60a71ffa7c778caf7a18865725e09ade62bfecd10fe8c4a5e46c35353c74ee7100da5046fde633fb6bce62504bb98e250

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ec

Filesize
456KB

MD5
c73bd50c4179686eab1d2e92cac58b15

SHA1
f8df946e297ac5e076e6f91030de53bf41820ef6

SHA256
d7344f92a3c84e2c1ff900eddf14e2f24302b594753a46b326683d612f21265e

SHA512
0db01a84713d38c33c0e419c69ad7a00d9dca0f30c64e6738847d2afa8ed79d1378fae1139fbdafe96fc755f4b564d08e7c3446df3fb30e7b5c8d3da41c3e9e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0

Filesize
309B

MD5
83ba13c54617ab03543c1008e109c235

SHA1
ba758be3af1c170263b3eff642d95f4e7e1945d9

SHA256
ca361d4932874e2aea25cf806baff8958777e1deb7aab585c280682517d40fae

SHA512
5c01d56d8c19c8e3cdcf6a08974c0a80e464992c235362c2511725a15015274384f6607ae5b0c007bd5af5fc4e5191b92fc1e3aa3def78f7864a225c5a96f8de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5bb72335d7ed95a4_0

Filesize
422KB

MD5
d20117c8edbbd7224cb3252f53db7e15

SHA1
c2e9b35dad5d6e64d2853bca58cfbcacf0430928

SHA256
243edc6965793e35d14a1db4cccd6b9e7cb7c99af12adc9f5f43394b2d6d9f10

SHA512
87c186d2dc70542b754571fd3aded42486083faa8d0c75082f5b50184feac6ee713bb6a1fc3644615d78407b8afa0591ed237dec420dabcda780abe4baf11e80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7980a33aab61a268_0

Filesize
276B

MD5
5d8cab6768ee0ae1ffa4434e91e1b066

SHA1
0126233fae3a4fd9966aab773cfcc61691a6d8e7

SHA256
b9b4b38b443935a38312a55d213e0a8937b7c3f49f94c41eb74cfea70895ed02

SHA512
a7b09ab44cf75de6af77402097eab673b6f472466e45c113eb69ac18260f7240dea7c6a06bcffc415077d35b086f3532f8edee4ced2d042e9f985dbe96fe6631

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
9KB

MD5
820b6d17cb388b4e364f21fec3294715

SHA1
a611b61663fd000184b655d564434da0fb461ee8

SHA256
18aa8e971310e3bd6cbaada71942b700bc7f4a15193f86ce0026b4c18be27ec0

SHA512
b03e631b8398ad9361587c7466391e8eb06ae210d3b0443ca6b2d993bc9f73e090454a3ee171441ec7347dab48680c01951ae72d5e4e8e673f2ad866b650fed2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5883d1.TMP

Filesize
3KB

MD5
e9f071540b01d30a742f34c48326969f

SHA1
c0c74be72f7a47df5e4c284f8fc133c9e1c39191

SHA256
752d8e57500615fe393e28949a37e35cf414718214cb85b58906ce9eb3e1152b

SHA512
c8dd2ae84dfc54b0a815254cb62a9b35c4961c15cfb83f3061a88615a6a5023d291ae6634268a3fcdbe8565ba35fa0f663127703b7ead03a4edb68bbc89b89fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1

Filesize
264KB

MD5
f461a1ad04fb6664a42668aae679cbb5

SHA1
edb839d07db0d44d522a927b46e94b1c3e24d0b3

SHA256
4607e33c2f1109d2a71c37ef80824608fd8dc07d533f6de4ea47165696f6f7a6

SHA512
cc4fe82d0ff40819aab60140f52e08ce3a423e93b115ba9bee9754392f92a46ce3bb50f387ffb943cca7e0747275c0ce32804712ab1ad9e7d4ed852816df856e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.eneba.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
37KB

MD5
a3d155f5759dffacea479b41685abfe6

SHA1
94089394feaaecbb2c7f58407e59fd03a02f48d0

SHA256
a67a397e0a4467a6414f5fa0bc4ee4a41cf0d80b42b08d85720e7d87aeccf639

SHA512
c7c72a9992ba9835c8517208cf93c215b7dc72e3ae0d5af28297a52684ec3468c89747a5a759963d9f4b005fa905abff6516f7893dbda689caa1db3f26ed9b62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
36KB

MD5
39638695dc0e7327522db1b7486ef9b4

SHA1
9330c01caf057c36a2ccaef780cb8c6cac4910a8

SHA256
88a44819db2579d280b3b05fef733157e9343933732abb22a0f62026770ea2a6

SHA512
3fcec02a116667cc1bb87cc5bebacea78c949c05f83b1d4e9a01e24ff10ce9a4a9255035bc131a051fec8f1325b20e234ffa6de3d44df057b3d41f2f5ab58cd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
26KB

MD5
95f28b9f53078d7a4a0302b565c8d631

SHA1
56e1e714290a833e020860472a6cd86992ee743e

SHA256
d237338595c6da64924c4048e45cb7f99b54037f0970299c3d87c223a9375eb3

SHA512
9eb4014d783452c1fcd6cefa4a012a6dd815a5bdf7ab4b54a676be49aac8641c1a378aeecf573cb6e8e14ddf0437592a5cc8556e6c14faabc166b38ae61336db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
27KB

MD5
dc546be445bf9487860c226ce19cd1fe

SHA1
a107b070c2348c463124950ba91f1dd78a248260

SHA256
0404f9e898985678c644c63fda447d3a0d9480c11b50c3ebfde3dfcf6a7aa356

SHA512
fbb192ce9c7440e4c634d665738921c02c7a94258f2a6921188d67eae6c0295c94f68354e9780eedc55e3e1ec750f291a63951a95618a88e1fc03a6cae0fd778

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
31KB

MD5
f21166f83f2736065aba352c9c861345

SHA1
c5832ebdf979ba5e4914f141f9bc7f05bfaf2150

SHA256
9cadfeae642b529a7e996d02656bbcdc7b71343cc9c070a5dd94cd3e6df38e08

SHA512
6a1c48f891bb10bd2c1eaa1cc5f08c5f6ffb18ed945a51a1953a20bb199b2d06a934557514df81f338064b534715620516d9acfe66fc9944049a4708cb3ecf75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
2342b6b8b55e011cfca7e0d42cb96060

SHA1
f681a1a2eb60b2638cdab0b156bf1878ac633f7c

SHA256
3d591d2d669197ed7fe41993d18b652232e71295e8f40d9b552f40352721f5b4

SHA512
d2b3703b271697f2aa395b124de43faca2bdceb8aa852e0420182eefaebb3a729e76654eb2f9ba59c8a0631553a3e71ba497c1f30059d0c9f4e62e465ce01af6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
5845f6463186c324464aa1db3cf44ac1

SHA1
fd5f96e3244b802d4e4497c0d15770a0181e64f2

SHA256
7abc2a730b95aa44216b676f4db95284b5660dc4c0331427c7dfb4ea6640e8b8

SHA512
6d86d8e79a2798f88d6bb80769ab74dfc3377a2a5faed64ea15795697ffa832f8387aca3b39d57d49c01a3eeecf5c5da18c220ffc9c65e440c015358fcc6fdac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
168B

MD5
5f57ca7e12e5688b44cb9995f4bff9df

SHA1
30dc2227e91ecd99b0d1ebeb33c57c1de4ddd8ce

SHA256
4a6ccdcbc8a4441d8f85e4320afa8e47068b9bbaa9b6c2b016ef6ebb50769c8f

SHA512
642b0cff13b6564c9fa09adf1e1cf1aaeff3c56b2dfb8cf621f4b8bf076876574402cae1e424d63450b31c4a2df0c0d9a6f7fe9743ff3197dc3de20e8b52400e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587c30.TMP

Filesize
48B

MD5
af8ca9c71fdb0ffbca89966c98ea18ac

SHA1
77e6effc76fce46b3e21ffaf9b0dafa0dd4809c5

SHA256
c7f918d6ec692f7e3fa82db77f12ca9bb257e918210caf1460cb9d98dd07638e

SHA512
98b025379ee60c891ee818820e535de8ce6e9004d5a89a13e4cca0b57a6a0d0aa6733d38cc27c3e4b321614730841ca89431ab2618c534633a87d5dabe587a88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
23KB

MD5
de4389ed80be2fc30947c2334f525e9b

SHA1
2387901c1ca6aa61ebde149a9f528aeaef4b32fa

SHA256
2743c3bf361d0eb7a3d87901ae4270117093e3f924704313820b85708d3ad878

SHA512
07c797379e606f9bf5df189690fc8ad92e0fe359b1ec15a9a7a88f46a87791bee8c9bbed3ee0ec35fa2726266b7c2b6f3171f2709bb90fa61102c6ff7c153b9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
890B

MD5
76c658fef97aaa9b9756cffda6592669

SHA1
304d02ae3e7466086176d43bd715e8e294335f56

SHA256
134a5acddf8d2fbc132f2648e06ea6103a4f16d0d3f8250c39ae3ce3bc49c325

SHA512
394a78fa7218ad85b800dec263cf5ce948925eb3c9c14fb472c81a836f10722c0186fd3cb2014bf31f8d5b342b3f00cf327c4a319c0f989a306095d7cb1ecfcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
23KB

MD5
5d58bcc857c69038219be9d34078ba8a

SHA1
2f1c93457beae94478a1715bf0e4e4d3ac5313f1

SHA256
f17324b60342839a8026d1b695275210c2f75e8f4650a3f3102c36d367ee6219

SHA512
78c0b7efa8b86c4884d283cefe3d55feda179ede7830e63c6108926bddcbddf6fa9fa00d5bd2420284ff796bcf56ecfe97e1953bfcdfa45065be2778a2fe60ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
463B

MD5
9a380d07889c913cf276e926587160fd

SHA1
9d543cf55712e436d08a2f2449e6430908657703

SHA256
3001863e0c596af24b8bca45bef5749c9f9017d276fe6b9a61634fe7ae5d1a95

SHA512
9deddfd0c9726f453bb1e091c67422b2b8528d6d2f438d7b83f3422adaa4594be18b59b6cc3f9dd3644306bb04e01bca39eee1280439ac0a618807a0dcc08210

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig

Filesize
19KB

MD5
41c1930548d8b99ff1dbb64ba7fecb3d

SHA1
d8acfeaf7c74e2b289be37687f886f50c01d4f2f

SHA256
16cee17a989167242dd7ee2755721e357dd23bcfcb61f5789cc19deafe7ca502

SHA512
a684d61324c71ac15f3a907788ab2150f61e7e2b2bf13ca08c14e9822b22336d0d45d9ff2a2a145aa7321d28d6b71408f9515131f8a1bd9f4927b105e6471b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
55KB

MD5
4a55ddc1f53833544b2c886d877ef741

SHA1
07719582706846385ffaf7302e183c5a1f52b009

SHA256
f1115cf3f66aa51ace5044f0730e265024b85261729e7f34e0ce96b2fcc62f07

SHA512
50b9686d7e53a7a8b14743d0f4326ab2417961cdbf87469073a88a76ad4264d512e840b7a10d945e5ed590e8da696fb09b6d1ca9524915dd11cb3c4917757d4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
c0a1fca65fdc83a4335086af1447a38c

SHA1
4f0ad7236cb6d00b3c33d412778ae7d3a252b81a

SHA256
d7232f494ddd0c2fc04a466f495987e9201d5a9eb78061f9700c6d4fa7318378

SHA512
69d1026e9ce9d3b452f9ca0ca43296fb60f996865a736dfe8264573da7be540b0c0f28fad8e1b0c179f0d45928904bfbd6026ade56ee0a4f3e29ded004d755fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
5a2f342a974a82781100314b07c40d9e

SHA1
cc235dff88b4c08af05d9c694cea4febbd4a519c

SHA256
5a8c828bc2c0f5d6c5ee7f2fae347df7d50f0ca1b5bd5742cc417d56fc0949ca

SHA512
112c7cd61d078b9ac878074020fafad48a658392c01a58a56928fec43b6c15959625cb505312488742fdb853c257b5623bedcac9119fb2e11d22106768cdf85d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
61KB

MD5
f7bbea8e787b5d567bf7f0170b17eedf

SHA1
dc8ab143c60020f424690c95df90b35732b5d4f1

SHA256
e97130c1875ef03cf898cc30ccac0670c01db5d0999958b3c6ca290465b97ecf

SHA512
82c64158dd1a367a53edf5757718559d67f1e4c342498000d939d8b44a21cf63feeb0451d17e1411e4b8aa202f88aa94d0caf0496509e146cc9b95722f8857d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
36eee12866d1264f146605a9b65dd547

SHA1
b12bcc6c4a21730f59a1106aeecd751c07dd1a8c

SHA256
8c327c820ecc4fe9d00436b53aed6e8d2663b8ebdd2f066269f295c763410684

SHA512
2cc8d70b41f29858b1374af78a47f5cd3daf7553272f249fb8f041f6a53714eff4160977955b1da46880fee65d1d59015b9eb3fb884bfeb612e9f24fa20cc9bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
31dc45771609e200b723de35a9b30b81

SHA1
6cf838da12732f759683957d5a1059df9a445fb4

SHA256
30faf74413db0d75013a3decfa5419126643e2fb2d394e0c371b2ef9fca9c06f

SHA512
b8a1ca9a7c791c023e7dc40bf9f89ba348c3cde6fcb0b4d1049baa7411cdb84e123b04128c735762adda78e7cf251bdd6ef50fe44159c222b12c8bca9bc20cae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
c6926cd68b8e0a35086ab06a485fc47d

SHA1
4449b653face5e3b0e7f06faf7305138729480c3

SHA256
ff99e62ffd9501230a2bc07f1f33290fc07b38506a19722853c9843a9a4990c8

SHA512
c1cd757adc17c5c9f63a7f4e522d2457a87788072cc469dfb497a14da42fbf4f2adb9e0498e50986a55d7f94c7ce3f53b35ef8d1d6d2c358f889f09bd9494d73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe57e7df.TMP

Filesize
392B

MD5
20db0af3d9481ce98de9a1197c78bab1

SHA1
c9df6ad1bca801cf2a28cfc06b4e571dcb823bf7

SHA256
f19cd0ef834cc998dce202376e4e9b2228531b1bc3e8d53d22478117337615bf

SHA512
6a3a7254406f0bbaba42ead8de3b1532f14fd3b9afdb49f5bb303752087becec69a66f54ed01ab2f558225457a972617121a4efee338f417a411eb0dd21300c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ghbmnnjooekpmoecnnnilnnbdlolhkhi_1.fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

Filesize
152KB

MD5
dd9bf8448d3ddcfd067967f01e8bf6d7

SHA1
d7829475b2bd6a3baa8fabfaf39af57c6439b35e

SHA256
fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

SHA512
65347df34378c2bbb34417e2cccfb3251a0b2412422cc190eed9df525b6e0a9948e0295ea3c33b3ad873ce81e369e89a138ac41d6eb7229546c3269107e661de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
403d96b99758ee07d7b9f61f67af4538

SHA1
22df0e5779fb2a4dba603937adbc30a0b411701e

SHA256
74836196e6fb5f3c1d57289e09f58c231eede629aea5baef787c7f0e38d9a596

SHA512
c75b75c8dda3b8118d8578c9c9095eba724359c440b8015ce9d4b1fb458b77cebba8840eae755a1fae52e313afe1d3ec9eddb669c28e1b80263d33b77cdee8d2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads