Analysis

  • user interaction
    yes
  • max time kernel
    654s
  • max time network
    945s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/05/2026, 00:42

General

  • Target
    https://github.com/Endermanch/MalwareDatabase/blob/master/rogues/NavaShield.zip
  • Sample260511-a2bx7agy5t

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Downloads MZ/PE file 2 IoCs
  • Drops file in Drivers directory 7 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Sets service image path in registry 3 TTPs 2 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

  • Checks BIOS information in registry 2 TTPs 8 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 15 IoCs
  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • ConfuserEx .NET packer 1 IoCs

    Detects ConfuserEx .NET packer.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 11 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 26 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 16 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3268
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Endermanch/MalwareDatabase/blob/master/rogues/NavaShield.zip
        2⤵
        • Checks processor information in registry
        • Enumerates system info in registry
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:4568
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x294,0x7ffbc97dc188,0x7ffbc97dc194,0x7ffbc97dc1a0
          3⤵
            PID:4688
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,4957646749455112190,8009636744633722755,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
            3⤵
            • System Time Discovery
            PID:4856
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,2267855046061323135,15550946625640948380,262144 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:2
            3⤵
              PID:1240
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,15702810947559632212,3640158226969175775,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
              3⤵
                PID:888
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,13178820131281134181,4079166217467976954,2097152 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
                3⤵
                  PID:5008
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,936919124241234227,8202799496756830979,2097152 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
                  3⤵
                    PID:2632
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,14108586641649193855,6897535356068633655,2097152 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
                    3⤵
                      PID:2692
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,14701785217711292163,18373358630800456927,2097152 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
                      3⤵
                        PID:2836
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3848,i,870854022608311940,11448801982715510737,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
                        3⤵
                          PID:4392
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,17256671805678246762,16659150406062203805,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
                          3⤵
                            PID:3184
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,7910949193742636196,4654539377664600872,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
                            3⤵
                              PID:4560
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,16547360051184148923,14635248131299992067,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
                              3⤵
                                PID:3116
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,10064152168182396677,10660134777605043365,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
                                3⤵
                                  PID:3476
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,10064152168182396677,10660134777605043365,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
                                  3⤵
                                    PID:5036
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,761161803561190396,2043851572723662588,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
                                    3⤵
                                      PID:1704
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,13706301878321660450,2432958534070239494,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
                                      3⤵
                                        PID:4276
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,14043250405800402380,2307544986886664445,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
                                        3⤵
                                          PID:4864
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,1190238658798994211,5168961447326289147,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
                                          3⤵
                                            PID:4888
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,5959593992869306683,14702741013872521873,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
                                            3⤵
                                              PID:4008
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,8620414517559111083,15807169357205353258,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
                                              3⤵
                                                PID:5204
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6268,i,11563199712419110967,5462679122247425035,2097152 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:1
                                                3⤵
                                                  PID:5212
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,14151093786963986302,17687167820399622640,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
                                                  3⤵
                                                    PID:5220
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,11099891787491398935,10303843280884976223,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
                                                    3⤵
                                                      PID:1704
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,2726453811516949602,1819400751047420722,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
                                                      3⤵
                                                        PID:3248
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,6794803576943511076,3069560201448771459,524288 --field-trial-handle=2108,i,16851113971937270843,14310978107173289924,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                                        3⤵
                                                          PID:2724
                                                      • C:\Users\Admin\Downloads\NavaShield\[email protected]
                                                        "C:\Users\Admin\Downloads\NavaShield\[email protected]"
                                                        2⤵
                                                        • Adds Run key to start application
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of SetWindowsHookEx
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:5160
                                                        • C:\Nava Labs\Nava Shield\NavaShield.exe
                                                          "C:\Nava Labs\Nava Shield\NavaShield.exe"
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of SetWindowsHookEx
                                                          PID:2332
                                                      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                                                        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        PID:1140
                                                        • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                                                          "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
                                                          3⤵
                                                          • Checks computer location settings
                                                          • Executes dropped EXE
                                                          • Checks whether UAC is enabled
                                                          PID:7672
                                                      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                                                        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
                                                        2⤵
                                                          PID:6828
                                                          • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                                                            "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
                                                            3⤵
                                                              PID:7472
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
                                                            2⤵
                                                              PID:7604
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                            1⤵
                                                              PID:5020
                                                            • C:\Windows\System32\rundll32.exe
                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                              1⤵
                                                                PID:5984
                                                              • \??\c:\Nava Labs\Nava Shield\NavaShield.exe
                                                                "c:\Nava Labs\Nava Shield\navashield.exe"
                                                                1⤵
                                                                • Checks computer location settings
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                • Checks processor information in registry
                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                • Suspicious use of FindShellTrayWindow
                                                                • Suspicious use of SendNotifyMessage
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:1052
                                                                • C:\Nava Labs\Nava Shield\NavaBridge.exe
                                                                  "C:\Nava Labs\Nava Shield\NavaBridge.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:5524
                                                                • C:\Nava Labs\Nava Shield\NavaDebugger.exe
                                                                  "C:\Nava Labs\Nava Shield\NavaDebugger.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:5548
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://adultfriendfinder.com/
                                                                    3⤵
                                                                    • Drops file in Program Files directory
                                                                    • Checks processor information in registry
                                                                    • Enumerates system info in registry
                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                    • Suspicious use of FindShellTrayWindow
                                                                    • Suspicious use of SendNotifyMessage
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:5396
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffbc97dc188,0x7ffbc97dc194,0x7ffbc97dc1a0
                                                                      4⤵
                                                                        PID:4432
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,11144268483128313904,1218557658254159051,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
                                                                        4⤵
                                                                        • Downloads MZ/PE file
                                                                        • System Time Discovery
                                                                        PID:3700
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,16280601132424594951,5386106012020504378,262144 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
                                                                        4⤵
                                                                          PID:5784
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,14708432101674679954,2499161469489607209,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:8
                                                                          4⤵
                                                                            PID:3332
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,7541598818022813917,11886999341011304121,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
                                                                            4⤵
                                                                              PID:652
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,13337784133937161189,12070485810986804738,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
                                                                              4⤵
                                                                                PID:728
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4924,i,7631560844993979450,3331236046947093102,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
                                                                                4⤵
                                                                                  PID:4652
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4704,i,9109057871864451720,5784388681710991556,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:1
                                                                                  4⤵
                                                                                    PID:5208
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4772,i,581940272302766916,2181464478786092979,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:1
                                                                                    4⤵
                                                                                      PID:5536
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5200,i,12848044420160033277,8668265081733491148,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:1
                                                                                      4⤵
                                                                                        PID:4644
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4824,i,4214257668875834600,9381925626734909720,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:1
                                                                                        4⤵
                                                                                          PID:6012
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,6939305540405583265,11510758039620851055,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
                                                                                          4⤵
                                                                                            PID:5920
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,6939305540405583265,11510758039620851055,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
                                                                                            4⤵
                                                                                              PID:5916
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,9995644959272515672,14986806668267673951,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
                                                                                              4⤵
                                                                                                PID:908
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,8600976853998976268,8428136238727394957,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
                                                                                                4⤵
                                                                                                  PID:3408
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5280,i,8817691692105222316,15290042024300021072,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
                                                                                                  4⤵
                                                                                                    PID:5092
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5856,i,3536342185727947568,6213760648891927611,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
                                                                                                    4⤵
                                                                                                      PID:3124
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6432,i,2173061438372972285,4005198838030321524,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:1
                                                                                                      4⤵
                                                                                                        PID:3644
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=3424,i,17458679395257246300,8136366647387621350,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:1
                                                                                                        4⤵
                                                                                                          PID:5036
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5332,i,15214447401827411295,11439169431445130234,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:1
                                                                                                          4⤵
                                                                                                            PID:3140
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6476,i,5010510717762518465,17638563554644327718,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:1
                                                                                                            4⤵
                                                                                                              PID:3748
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5024,i,11138296871899531493,17860970615192537795,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
                                                                                                              4⤵
                                                                                                                PID:1136
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7008,i,8245650996884133524,8998646524364619019,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:8
                                                                                                                4⤵
                                                                                                                  PID:5988
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7004,i,7194377584194600171,5282187164818499291,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:8
                                                                                                                  4⤵
                                                                                                                    PID:6028
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6988,i,470189863809824165,3898307609961161267,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:8
                                                                                                                    4⤵
                                                                                                                      PID:5908
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6992,i,4384196892909635538,3609518959987620572,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
                                                                                                                      4⤵
                                                                                                                        PID:3224
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,1724853453497930948,3297111410674975596,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:8
                                                                                                                        4⤵
                                                                                                                          PID:4560
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,2305721890120181096,9091516382997752028,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:8
                                                                                                                          4⤵
                                                                                                                            PID:2644
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7432,i,4523651571518414397,9770924398907566927,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:8
                                                                                                                            4⤵
                                                                                                                              PID:5684
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7576,i,10364785642530515902,3837202213150592467,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7580 /prefetch:1
                                                                                                                              4⤵
                                                                                                                                PID:5928
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5032,i,16916343979293937735,6925166716727759923,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:1
                                                                                                                                4⤵
                                                                                                                                  PID:5988
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,9776738396058348582,7380947196752032691,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
                                                                                                                                  4⤵
                                                                                                                                    PID:2044
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6828,i,5975921969236834386,2258910944786903948,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
                                                                                                                                    4⤵
                                                                                                                                      PID:1872
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7844,i,5937824729814226603,16882643679597327142,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:1
                                                                                                                                      4⤵
                                                                                                                                        PID:1160
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7648,i,18102605756638770377,74772912220679153,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
                                                                                                                                        4⤵
                                                                                                                                          PID:1852
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8020,i,16749594083693227794,8998669751138408983,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8012 /prefetch:1
                                                                                                                                          4⤵
                                                                                                                                            PID:2984
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8160,i,16533121284055073986,10574800369294029930,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7676 /prefetch:1
                                                                                                                                            4⤵
                                                                                                                                              PID:5288
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7692,i,15664052170602517939,11707807092459626993,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:1
                                                                                                                                              4⤵
                                                                                                                                                PID:1276
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8160,i,18057502424948837161,18116669960059455186,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
                                                                                                                                                4⤵
                                                                                                                                                  PID:4520
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=856,i,5311241840207673134,4019891029356485678,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7804 /prefetch:1
                                                                                                                                                  4⤵
                                                                                                                                                    PID:5712
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=6932,i,3331927396478608593,5974148628531489920,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                                                                    4⤵
                                                                                                                                                      PID:3484
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7344,i,6804094995185815601,3785166868278622628,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:8
                                                                                                                                                      4⤵
                                                                                                                                                        PID:5432
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5032,i,4507998790202494385,9513801123596479868,262144 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7740 /prefetch:8
                                                                                                                                                        4⤵
                                                                                                                                                          PID:2216
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7836,i,2065406436079447801,13455173392304721886,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:1
                                                                                                                                                          4⤵
                                                                                                                                                            PID:2832
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8160,i,6178075405994874429,9533473507829875766,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
                                                                                                                                                            4⤵
                                                                                                                                                              PID:6084
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2852,i,11025792076350700386,5799262020986326759,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=1316 /prefetch:8
                                                                                                                                                              4⤵
                                                                                                                                                                PID:1280
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=4028,i,6856296877304484807,8810685775601370440,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:1
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:2740
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=6996,i,12703531826368916876,1690143001355902742,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                                                                                  4⤵
                                                                                                                                                                    PID:3764
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7008,i,1286858977064349940,87921565296473317,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:8
                                                                                                                                                                    4⤵
                                                                                                                                                                      PID:4084
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3988,i,7817024687983654292,8104043597568601596,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:8
                                                                                                                                                                      4⤵
                                                                                                                                                                        PID:3184
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8156,i,17121111683648194620,956490563724892492,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:8
                                                                                                                                                                        4⤵
                                                                                                                                                                          PID:4812
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8228,i,11066324318546709363,9400421475241718577,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8232 /prefetch:8
                                                                                                                                                                          4⤵
                                                                                                                                                                            PID:5916
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8392,i,11939169819202707160,8733920577350145817,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8268 /prefetch:1
                                                                                                                                                                            4⤵
                                                                                                                                                                              PID:1820
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8732,i,17835288759563799017,12374964372408409591,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8744 /prefetch:8
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:636
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8900,i,10275846028507208837,2006884325398180428,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8928 /prefetch:1
                                                                                                                                                                                4⤵
                                                                                                                                                                                  PID:6840
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9028,i,734586863692852396,1939634553624227872,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9132 /prefetch:1
                                                                                                                                                                                  4⤵
                                                                                                                                                                                    PID:6956
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8936,i,672974556129339183,8957587098422538239,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8788 /prefetch:1
                                                                                                                                                                                    4⤵
                                                                                                                                                                                      PID:6480
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9176,i,14375260962419424359,17121904085994964561,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9188 /prefetch:8
                                                                                                                                                                                      4⤵
                                                                                                                                                                                        PID:6500
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9108,i,541226859047447515,9077938571365995333,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9168 /prefetch:1
                                                                                                                                                                                        4⤵
                                                                                                                                                                                          PID:6612
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=9180,i,13931811808188045755,12971146945583936691,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8656 /prefetch:1
                                                                                                                                                                                          4⤵
                                                                                                                                                                                            PID:5044
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9068,i,7479706850271397619,3822079610388449917,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8972 /prefetch:1
                                                                                                                                                                                            4⤵
                                                                                                                                                                                              PID:6316
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9256,i,3747417053866686800,8140618476730171241,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9252 /prefetch:1
                                                                                                                                                                                              4⤵
                                                                                                                                                                                                PID:5412
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=7724,i,2544974976306216870,17372702868894332673,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:1
                                                                                                                                                                                                4⤵
                                                                                                                                                                                                  PID:4632
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=9404,i,15707189173027175518,3935093220104712991,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9236 /prefetch:1
                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                    PID:6312
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=7760,i,946392567223895186,17506967452788329498,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9544 /prefetch:1
                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                      PID:6360
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9696,i,3825996569277380089,17646834670947163135,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9668 /prefetch:8
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                        PID:6960
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=9700,i,15698057275253438624,14038441214587724661,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9716 /prefetch:1
                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                          PID:7036
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10120,i,11238270453959368943,3356001366639258887,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10124 /prefetch:8
                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                            PID:7136
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9996,i,12748271430091111133,5229041163303888196,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10188 /prefetch:1
                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                              PID:4156
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=10340,i,7018570575492848223,16730384779461507937,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9416 /prefetch:1
                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                PID:6720
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=10148,i,13486606528530406592,13919026453784566147,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9000 /prefetch:1
                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                  PID:6732
                                                                                                                                                                                                                • C:\Users\Admin\Downloads\MBSetup.exe
                                                                                                                                                                                                                  "C:\Users\Admin\Downloads\MBSetup.exe"
                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                  • Suspicious use of NtCreateUserProcessOtherParentProcess
                                                                                                                                                                                                                  • Downloads MZ/PE file
                                                                                                                                                                                                                  • Drops file in Drivers directory
                                                                                                                                                                                                                  • Checks BIOS information in registry
                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                  PID:6976
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9756,i,17845282678446523952,85570012207895250,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9728 /prefetch:1
                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                    PID:6244
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10612,i,7538168187028790554,10604726822185114402,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9732 /prefetch:1
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:7020
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10300,i,11716045344060386106,785389154014935984,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9420 /prefetch:8
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                        PID:6928
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=9944,i,9840719431424396642,7612131723510342790,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9780 /prefetch:1
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:7116
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10224,i,15925099927746495646,1393391693008750234,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9536 /prefetch:8
                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                            PID:3632
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=9380,i,7037733122337534931,12031061766311214542,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9632 /prefetch:1
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:5704
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=8180,i,300310787089074676,15465985993950041105,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:1
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:6176
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9752,i,14220789174643177774,1704028570618351518,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9792 /prefetch:8
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                  PID:1120
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9400,i,11644920978364206319,2256241654380893211,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=8884 /prefetch:8
                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                    PID:1980
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10252,i,11119519558199054825,1683939648013409486,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10216 /prefetch:8
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                      PID:4480
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=9464,i,1853535583254281688,14408365845521195225,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10300 /prefetch:1
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:4984
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=10776,i,5838852963333184522,3989131388172124282,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10788 /prefetch:1
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                          PID:6716
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=9944,i,15161101211683714924,13211349777052515963,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=7816 /prefetch:1
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                            PID:6740
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=9432,i,10933715899713234462,4542177652371052026,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10192 /prefetch:1
                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                              PID:3196
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=11032,i,9591711733259576299,6155555897169366417,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=11044 /prefetch:1
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:7016
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,8558579914280171784,17524477181569277916,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=11176 /prefetch:8
                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                  PID:8120
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=6836,i,10383148222234878994,8417254056049289430,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=11092 /prefetch:1
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:7308
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=9820,i,8570501685439776329,24651784033282859,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9824 /prefetch:1
                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                      PID:7216
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=11188,i,891093587318549655,10845781824702442508,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9268 /prefetch:1
                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                        PID:4312
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=9820,i,1603661433941844945,5390858696618814535,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9008 /prefetch:1
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:7628
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=9580,i,3474957274498852228,12920505084211904834,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=9092 /prefetch:1
                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                            PID:7968
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10224,i,2173793317225266044,196754289092791892,524288 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10856 /prefetch:8
                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                              PID:7720
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=9824,i,10870662578562664243,13091745414768384846,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10284 /prefetch:1
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                PID:7996
                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=11416,i,12085792520262580628,17962144608716990437,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=11432 /prefetch:1
                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                  PID:5364
                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=11256,i,17026859852367399014,10031156025092568526,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=11132 /prefetch:1
                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                    PID:7824
                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=11660,i,6308531780505922206,16321515034288957621,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=10732 /prefetch:1
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:3804
                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=11364,i,3796424373639740624,14467465190312062931,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=11512 /prefetch:1
                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                        PID:7976
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=11876,i,2390592476735052361,12488055826409571022,2097152 --field-trial-handle=2344,i,2613165144349120576,15869225217529936566,262144 --variations-seed-version --mojo-platform-channel-handle=11740 /prefetch:1
                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                          PID:6256
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.idolwhite.com/fr/
                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                          PID:692
                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.thaigirls100.net/
                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                            PID:3096
                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.blackgallery.com/
                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                              PID:2316
                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.xnxx.com/
                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                PID:6128
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.agedflowers.com/
                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                  PID:3264
                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.orgyfantasy.com/
                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                    PID:4640
                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.shemaleseduction.com/
                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                      PID:4792
                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.sluttoons.com/
                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                        PID:5372
                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.movieerotica.com/
                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                          PID:3760
                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.orgyfantasy.com/
                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                            PID:6368
                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.adultmovienetwork.com/
                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                              PID:4708
                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://gaypicstgp.com/
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                PID:6948
                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.lubemytits.com/
                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                  PID:3192
                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.maturehotel.com/
                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                    PID:4228
                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.hugedickslittlechicks.com/
                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                      PID:6360
                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.teenplanet.org/
                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                        PID:7228
                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.mymilfstory.com/
                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                          PID:6844
                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.amandalist.com/
                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                            PID:7784
                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.germangranny.com/
                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                              PID:6152
                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.wildlatinagirls.com/
                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                PID:7340
                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.germangranny.com/
                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                  PID:8096
                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.analcravings.com/
                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                    PID:6136
                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.clubsapphic.com/
                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                      PID:5100
                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x34c,0x348,0x35c,0x2a8,0x3cc,0x7ffbc97dc188,0x7ffbc97dc194,0x7ffbc97dc1a0
                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                          PID:2104
                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,3446370924858325407,9192315839660640894,524288 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                          • System Time Discovery
                                                                                                                                                                                                                                                                                                                          PID:7440
                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,170981596832283544,13734242656826008217,262144 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                            PID:5288
                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,8637502595366634751,14113850187751750706,524288 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                              PID:5336
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,369002866133951663,4081754611572338219,2097152 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                PID:6264
                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,15352329915830417729,10064787571656291431,2097152 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                  PID:7968
                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4752,i,17987074541275404093,8594134944045643084,2097152 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                    PID:1808
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5028,i,12643759075824492597,11563893781014107361,2097152 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:1
                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                      PID:6604
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,17642478968974588615,4158838598038089850,524288 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                        PID:6324
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,7257555680896929904,51533779080918871,524288 --field-trial-handle=2320,i,6118580140359759116,9746575068246797076,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                          PID:4156
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                            PID:1856
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x20c,0x7ffbc97dc188,0x7ffbc97dc194,0x7ffbc97dc1a0
                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                PID:2816
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,6438493377705741461,1744592298405752392,262144 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                  PID:5868
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,15121729163439118125,9987091080816674523,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:3
                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                  • System Time Discovery
                                                                                                                                                                                                                                                                                                                                                  PID:6620
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,6412136830453160313,16795107938147660644,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                    PID:3284
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,10751348523603695995,15341170152988093312,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                      PID:2076
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,10751348523603695995,15341170152988093312,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                        PID:3504
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4988,i,12473892361600595647,14523485642858822433,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                          PID:3608
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=4992,i,9135301479436232795,7058944753278887293,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                            PID:3420
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,1034074256078586543,6676900694277178805,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                              PID:5784
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,2786631955371915666,11223641437356128517,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                PID:5684
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5912,i,10354537750968462970,2104124596584262767,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:3908
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6080,i,12605716563496156191,3658263230779788088,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:5408
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6076,i,10105833799011674917,10792385076642892823,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:4020
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6068,i,1645392641995678130,17272698017863914042,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:2916
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,11501938674595723157,8067547251798656363,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:5940
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,15166559253859992880,5560405255893154359,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:3088
                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,3515606227274397496,11576193990390090181,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:4620
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5716,i,13309861715096535560,17902265732435723049,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:4576
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6500,i,7118508037441646492,5826187855588388963,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:5564
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5784,i,9828380196000753026,14192190278918980714,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:8008
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=2980,i,5278285170768666640,2218678215695537633,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:8144
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,2222039961522311554,8738620082874818594,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:7972
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4196,i,12107313474107343499,5339387322575652642,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:5956
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6208,i,11845561221528655616,10479336791849486797,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:7132
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6672,i,9025716218055544233,290881899754842992,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:1984
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,3941537568780230984,845351036893279688,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:2476
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4992,i,9809202720888918696,7324307157534740045,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:6996
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,15527403387442033167,13916700233214875861,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:3188
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,15249765876019552529,15169793850157557517,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:2100
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=748,i,16242704714905820341,286564974830575507,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:5268
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6204,i,3078732354628449762,6601236618647342249,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:4176
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5720,i,1278063810826971146,9113366794450825733,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:7740
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4136,i,5524549010338798891,10062911029646622745,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:6052
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,8464586398456989520,12917583462843278264,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:2192
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=1200,i,14290866858700799729,8495350845901896351,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5032
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6308,i,1895309585857662545,15981292674649760297,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=6980 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3132
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6312,i,1346936304599902664,14535080731760692518,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4976
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7268,i,5146292273770989912,3034198561337163547,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7112
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7360,i,10554899803260236801,4740232036346869033,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5612
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7396,i,2270842385652391114,2971819936346724918,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7408 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7228
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6728,i,9830815991571659894,11244228692454593181,262144 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2400
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7768,i,16270213471627137364,4641940436256198363,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6296
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=4600,i,9034028680386123276,8089051152920861461,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7432
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7400,i,4641319729737246094,14421042528749609532,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7376 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4516
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7656,i,9661926591467902,4333481179925247071,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7088
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=4124,i,4754578026659421299,11786772287371532325,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3564
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=3852,i,9295502462293281173,13157492620436441876,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5772
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7932,i,11427065539276808725,1233895481986333795,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4352
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8100,i,15320360636655388940,16137240062346928110,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8140 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2452
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7668,i,801903215463118865,9258094227459004807,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8216 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6612
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7956,i,10179037167068231647,3197263822122527193,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8064
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7984,i,14126239779503778302,10861843191648240283,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2124
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8268,i,15173682000268548489,1538835218633714502,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6624
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8404,i,3896495318897527767,16727308392437466220,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8416 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5904
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8660,i,17269090340026916166,10568966104799016417,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8560 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4116
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8060,i,3581114477217750298,6776038907939270145,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8648 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5476
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8064,i,10893383201242973954,13966780472114304350,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=8828 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4868
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9012,i,13155140805824774780,14786935910827381693,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9016 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2416
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9248,i,10341709551000367065,8997505635038103094,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9260 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7708
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9248,i,10341709551000367065,8997505635038103094,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9260 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9392,i,17248395735505503422,12453982929366822063,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9180 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9456,i,5714167734968197364,3082464304874279439,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9232 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5552
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9192,i,18324108994350998920,15105232874515211299,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9224 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-US --service-sandbox-type=cdm --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9616,i,644482441231978330,13778582260053578370,524288 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9336 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=9716,i,8372114578440541366,8804813775300656417,2097152 --field-trial-handle=2292,i,4825131466209717915,11014722934983734892,262144 --variations-seed-version --mojo-platform-channel-handle=9312 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5348
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.wildlatinagirls.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5360
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.movieerotica.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7476
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.teenthrills.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5500
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.latexsextgp.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7920
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.spermglazed.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1664
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://adultfriendfinder.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4724
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.cocksusa.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7836
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.youjizzlive.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:8056
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.euroextender.com/
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Nava Labs\Nava Shield\NavaBridge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Nava Labs\Nava Shield\NavaBridge.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5776
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5760
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\AUDIODG.EXE 0x2f4 0x34c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6072
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaulta8659faahe2afh4f55hafc2hd421bc933db6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaulta8659faahe2afh4f55hafc2hd421bc933db6 --edge-skip-compat-layer-relaunch
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:920
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Impair Defenses: Safe Mode Boot
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies trusted root certificate store through registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies system certificate store
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6640
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1264
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5892
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\DrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "0000000000000148" "Service-0x0-3e7$\Default" "0000000000000160" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Sets service image path in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks BIOS information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies system certificate store
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:396
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe" /rescuemode "C:\Program Files\Malwarebytes\Anti-Malware" "C:\ProgramData\Malwarebytes\MBAMService"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks BIOS information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3752
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe" "C:\Program Files\Malwarebytes\Anti-Malware" "C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json" "C:\ProgramData\Malwarebytes\MBAMService" "C:\ProgramData\Malwarebytes\MBAMService\dbclsupdate\staging" /db:dbupdate /su:no
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks BIOS information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8076
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\LocalLow\IGDump\sec\ig.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  ig.exe secure
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2736
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4396
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2784
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6776
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6624

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Browser Plugin.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\NavaBridge Libs\Browser Plugin.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bd474c5aafcaa12f20da5ecb29e17555b953eca46b4f56588a72672a36d4a8eb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MD5.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\NavaDebugger Libs\MD5.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 92KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8341ecc0938ca6d90b7e0f02af2d7e6b571c948a03a99d54af61c4557c78d656
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            NavaDebugger.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\NavaDebugger.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10.0MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7d899d2d33bde1c7f55ba0fcd4630b817e42e5cd1ceb8739511a990455275f90
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            NavaMod.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\NavaMod.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 abd84867d63a5449101b7171b1cc3907c44d7d327ea97d45b22a1015cc3af4dc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Internet Encodings.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\NavaShield Libs\Internet Encodings.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a50e56dfb68410a7927ecd50f55044756b54868e920e462671162d1961bfe744
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            bridge.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\bridge.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 176B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 45fa6eacea58e682c2ef2bb9e888cb6bf396c37b957fd144ca73c95699ad3c74
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            config.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\config.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7d69dba2accc104b08152257426660250b150ba8f139a4d4ea41a8de8dbd1838
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            navig.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Nava Labs\Nava Shield\navig.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 255B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9c4723ecb77e39e58eda9c60f532724aa3bf69de30047cc7b6522534cd423f00
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MBAMService.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11.0MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2c7d6bd3b638e2c5955af0716b9a090fe38d152a3bc2ca47e73a5293b957238b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MBVpnTunnelService.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 05d4d87f43646f7ca2e50520d8850e8808748a508c2761838d5fb92d66d6ce35
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Malwarebytes.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 291KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0d1623b5080b5252d34471b8b177c6cb32eeea86d48c6e7fcce989c2738c317b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ServiceConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 621B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cbe17f0e5cf867d3a3cb92ef689ffe0298848eac07c504878dd8c3b9bb11e3d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ServiceConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 784B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cc8a8adfa597864e7596e31b13d763cccd4603fd023822825b529e94b9b25dc4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ctlrvers.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0c294d683fff08b3098219db749f25784fbc19ff48c1e2a742f240941c225c6a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mb5uns.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\mb5uns.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2557968c8571a3e8147656ccc537866ec1644ec12ff4dd5d2aed0593c6000fba
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbtun.inf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            version.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\Malwarebytes\Anti-Malware\version.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7b9145c4396763f9d7cd1386052de2b19f3ae60774fefa22f658b28fe6edadea
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_1179077382\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 102B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Staging

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_1252287406\Sigma\Staging
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 36B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_1252287406\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 132B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            domain_actions.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_1367315957\domain_actions.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 83KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_1367315957\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 165B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_1968529104\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 52B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_2135975781\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 141B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_471266454\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 118B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1856_895528861\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_1005251068\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 177B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LICENSE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_1065965335\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_1065965335\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 79B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_119178415\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 238B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_135626004\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 85B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_1476982014\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_1601275101\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 160B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_1946820045\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 160B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_2091580836\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_593786941\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 119B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5396_858069825\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 113B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7z.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\7z.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bb01c6fbb29590d6d144a9038c2a7736d6925a6dbd31889538af033e03e4f5fa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Malwarebytes_Assistant.runtimeconfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\ctlrpkg\Malwarebytes_Assistant.runtimeconfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 372B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbae.sys

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\ctlrpkg\mbae.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 155KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c990dd89b65d35d6c9b34e21c78d96e206ec3bcdd934716ee61ff79da0fa5251
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbamelam.cat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\ctlrpkg\mbamelam.cat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 64416d564725416c6869ea951878a2734b1f6940b11f7961a897c45f0d8c6625
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbamelam.inf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\ctlrpkg\mbamelam.inf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e26c2d3347e5f077da92713c9df3cd3eae438fb7e29810bd5c3afe567d2d3125
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbamelam.sys

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\ctlrpkg\mbamelam.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ded569e249e590314d095f740c6b8934a5a797e4f3edbe0f78eac9d333f12a2a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            srvversion.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\ctlrpkg\srvversion.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 9B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8fe912b3029ad5e4eb9d4e6ce0c9b2d6c4539655786ac726a106a1abdac7ad8b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MBAMCoreV5.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_3f9dd64a4cd311f1be19eaa6ba3891e2\dbclspkg\MBAMCoreV5.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4072fea1c8284e71f9a4123ec9bbde7dc35f1d1b2a1745f9f33c728bfa8856a7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            b7e2d6bc-4cd3-11f1-9719-eaa6ba3891e2.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\ScanResults\b7e2d6bc-4cd3-11f1-9719-eaa6ba3891e2.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 10cb621415d971ca8255a72aec89b088aea3e51eaaf9084efcb2282c452818b3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            AeConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9256cbe8625d72b2c9e073ec504a917b1ebda403e84274c5a73da32b2a773ca3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            AeConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9985de6bd62a48b3f1676f298e739e2063c666693e8d6dcf12b5085e0e9efa37
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            AeConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 66KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 63b3123e4655dc720f21a76dfabcb1c6e3b0fc34dea5b4a967943a4a452d03d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            AeConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 66KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ba284851e9f221ef80c1f526957f93d7c77c0611299b470604b551aad1a4e84d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ArwControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 88e9c728f4fa6213cce052a99d5eb00f08a9598d5e589478f3add054c5c8d298
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CleanControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 949B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f6cc392a38ba951229f6d508455581f0466389a8ab9cc3f2bf9e299cb5af6559
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CleanControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 948B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ee9057e283383174c339b9b352454d76bcc12e5a74dea37f56dea9662aff0da5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CloudConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 be5a7e05e6aa133e762dc447ae4fc0711ec0cf00374b567fc7a307e8fe45c253
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CloudConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 738b15fbb8d2baadd795b097928738724438c9bae4b689ed20197bbbe6c5cc2f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CloudConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4402aced10adf405e5eab41eaece9da6e77fb07a4e56184239714693869431ac
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CloudConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b914d4fa393d7136ff6aafec1dc483dcfacea0cede14ed97a13247d51a9547f7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CloudConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 63380f7b7887aed608b80ee2be9a071b9cbb6ee21c9e70069a62becef4db5773
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CloudConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3ef08614e87d252bfcd32558c78da5e599a40c79ec76b92d02f007acc1de271e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LicenseConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d6a5a78f6acedf34cfd294a85cf93fc0acb5a4090b14993124ebd0ba2e117418
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LicenseConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f5ab8fea5f14c319041ac576bc0f543cee9d596cc3e53ea0d91cbab346d398f2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LicenseConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 20826eff06dd50ff278ee0dcb154d125d54230fd5689fead7d78a06dc3d7851e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LicenseConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bd4d3cae51b6f9af6e8eb95f8c4958dffbcd01350128f53288ec0af0c9875bec
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LicenseConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 36944b805febda3ef097ec22ddce4b76101d4f09b956e4fdcd34bacc69b6a911
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MwacControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d701cf54bca12fbf3332370e90238b56dbd9809022a20dc716d25279c8cf8235
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MwacControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a978eb732e53634ba0dee9934d5ea1ac0b3344b3190779b7d9b2658d7c16e6a6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PoliciesConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 814B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 87a77c8765d6d45ffc2283bc7ff44796f5f92c995a342fe575cf8eddfb0ba9c7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PoliciesConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 816B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 be60bbfb9f5c976e31598afa1fd189a6912c49186874a554f5d8cfe97f00f584
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 19c327b4e454ce47620bf0eac8b5a4412662863faca3a3c5ba63b9cdb46fc063
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f0998f93800e2f7c5add4b097d6ee7b3e9d0461eaad07996f0449c0ab6a38003
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b65ecc2a07dc3231ae30b9fb5c79549351068d8cadd80f13329ec66832bc4516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fb4c1ce7e5dca81835ebd9384a5b3ffd89b55811114cfce01615e7a7349506e9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 baec525b6f32bac9ff4742fc7023b10629a2a88b5813e9e0e10c457dcf9df044
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a7c625a4c4341c32bed8b286bd5dae03b133070e02cd628e5d2b59f4a845a889
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 944892ec5d507143c75821f98c53166f22ce8ccecdfc077976114fe8c152c608
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ebcf2a98dc4252ac5d219639b401e785fd6070f3d6430080b5816491c2d87381
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RtpConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bf10b0e938b5fc6f32d4fb57131612280250dbea39f4a0f0b2b05391d089d22f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 801eb06dd715fe36c39a5e2c3bef7bc6cc2f9109043656fd5ee4078aa9a19dda
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a9e2b469bf5ee5d3f0a0606df2f99329769c84aec881fe1701fd80c2d75b60cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d321f1a5bf800f0a86460a8e83d96c0f6df94f1c3a3a80d3d553e926f3d723b3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4fd0e5108fc50a5fccdf3bb65626a12ac93ba5213db2c52773fe23db28ba87ef
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ce4f31c596f605ebd28ddcac364c31c003b9063026ceca569301587f8ecc85cc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 653cc52b0fb1fd2fabfe965a7771d58acb9126b0df339626301407f6bf3624ae
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 38b250750a7883774460b817169eb292fa1c18981c991565cbaa94e93c28102f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ScanConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 39e69709d75fc357758894365fbbeed3825a70175d201a16cba91698488c11c6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SpConfigFile.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f2e0cfec79cb16d4958a0183577397dcbb3f1d34ad99dd82affaad8e51bc29e8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TelemCtrlConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3b79069f88bbd979c347738b2d277f787da6d70f5a2b7768a8fd23d902104c1d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TelemCtrlConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a9f83ddbdca846282ed046f4a396ffbc6f64a1845e9efd3cb4d75b99be4a6cfe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TelemCtrlConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 60176cff5f92e08cebf914c0f9c2ea41bfb0cecb4f934cbb5acb0fc632308428
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TelemCtrlConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9bc3ef887fc57759cc4d6591331c358b02ac6e0c35a9c171a3f91643237bab2e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TelemCtrlConfig.json.bak

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a73a3e61b28d98fc05837bec13d74303c9e7997107bf2179f9965cf52bbb3e05
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_ApplicationSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_ApplicationSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9e302862fb0728c168973673dc3e54e0fda898f167133e36b3dedb64ed1e976e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_IrisSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_IrisSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 313KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 911965c04d201ab0eeb3f5f929b6e0004267981123ef2434ae27cb6e1f72859b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_IrisSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_IrisSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 313KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 405183f866f3bb37d8674d4e2bc7127b4a2a04ec44441cecd31c6cc41b79467f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_IrisSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_IrisSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 313KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 44cdd067cfe4a26a84152ffc7865a31d94c7ac91f0344cffe6e6522e294a484b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_IrisSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_IrisSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 81b257a93f0dd7b6e084a8808cb208c6798d7f22dff0491f3c1ef7b862164b3d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_IrisSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_IrisSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1a989011d9031eda882f60a40b4b9035580c25fc789ca172331dacd14e5d5f49
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_SpotlightSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_SpotlightSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 454B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 03e13c5e9f96b71637e6ffe9bb37838133b742a98de02a5d928e8acbe8ec1f92
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UI_WhatsNewSettings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UI_WhatsNewSettings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 346B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 38815b8fc027c5929289dba5d352dc856de7555df7d5acb70604f862d6594a47
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UpdateControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7b7b3e2a784cfda73d3e5af3b5821051fd55e6568440a6c1cecf594f10c6baa0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UpdateControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3ed198ade5d5cbbf0f45cbb6518560d1e6b5029ff81b95949423a24c4bc4d5f8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UpdateControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2806001d900149bddaeebd2e560a3773efd810a82d86c3f253155115963988e4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UpdateControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b01ec8ff8d394dc6aaf90212b8b73420b423c4f09c5d0c5d6cc6d61d89d729e0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UpdateControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 669d76cc3d02cfbbe042f0557e60d1bf10bc168fce1d88aa94499db27d174a84
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            UpdateControllerConfig.json.bak

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 349d34087fcbf7665451aea0e76875a2097b41ca736786611d2cb4fb78cfa68d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            VPNControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c528cbba8a0e2599a03b9a6e75493f4dcb37a6aa54c92aba4a0c5e02021dcb7f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            VPNControllerConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c44f247ededd86a58be9bc08fb85b1ec0ddaf348ea0a1636f2cbc1cc130bdf56
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            VPNServerListConfig.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 125B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ab06250823857bcd74097b7eefcd27507940ca92275dde9ad51cd7c27813e29f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Actions.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Actions.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6.1MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d513f3a50ec070bbd74f78d27d79b6cb60aff48310283c74ebeb204aacf375a4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            BrowserSDKDLL.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7.0MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c72e39709b26ac7577200a76515347ff11c0a9424cf61657762d657e7aecd974
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Global.nm

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.nm
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 341KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 691cdbb896c98b272484b3ca5cdd1dbd12caac86bb9e99c80cf2f7a2f6cc2be2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Global.sr

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.sr
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25.1MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 653f9fb237cfa0c42c01dacc4eee9afd18cf101937a0f096c6632f0c6cf68fa3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            cfg.bin

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\cfg.bin
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 06cee2bf32530582fe8a7f84afd9be786f4986f3b35ad5c3989e61b7fab1e3f2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            clean.mbdb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\clean.mbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2cdaf96edd7eaeb156bd4950e533411ed93e81a6ebd06e29010050c6e3bb1fc0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            dbmanifest2.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dbmanifest2.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 924B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d7cee06e396eb174d04019f825757a5dbbcb49aca8c1842f5aa223c0a1376a97
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            dynconfig.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dynconfig.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 39KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            exclusions.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\exclusions.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ig.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\ig.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1.8MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 18730539538c30c3c298ccd999220be0e9a91ed8666a8b1da2c6d136e6335855
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbdigsig2.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\mbdigsig2.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 514B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e073d8acf8119cdb88f1cc9fb93e8449451397a2a408acec71b1554a4a56c65d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prot.mbdb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\prot.mbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            rdefs.mbdb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rdefs.mbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            rules.mbdb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rules.mbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14.3MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f2af5018221bc23e69d45f8b8d79d2987cf319b4f0686697a93460babae53024
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sample.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 524KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 06c1a019a4cdbc1d48327f33baa7cbdc95b71f6fd87245ea78610ecb20141dbb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            scan.mbdb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\scan.mbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 417KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b41e512dd7ceab43d094ebd096c016ea2aa34e7fac73612fb6ae47b9ff33a750
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            tids.mbdb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\tids.mbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 158KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0672967275bc93dbee92a052afa350eca82848fec6189a77801ee89b230ed5da
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            version.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\version.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 27B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3b10d8df8b03d7488392c00926ab6720a550333ed80e7acd7584afb460923aec
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            wprot2.mbdb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\lkg_db\wprot2.mbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 15.1MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 af055b9b9ad4ea0e1ebb9c10ded1e55253ba476bd0d89972977ccd6d35fa6b35
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkgvers.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 78B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8a6e52e53021c595da83e4c759658978b1d3e558fa2cd6e7238bba66932eb2af
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MBSetup.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\rmode\MBSetup.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0b9465643cd2609856e7ebdebc34296670a2b388c2bcf6e5ee0b59430c97bf41
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbrescue.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 477919ecb586d6ef4a06793417c2ae3126c51a51cf9445d901e90e3627e7143b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SdkDbUpdatrV5.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\SdkDbUpdatrV5.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1abf1edc99ba10c2d8cf554000cd7ce986084502df2de392db4f89e91f970407
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            expapply64.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\expapply64.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 473KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d23706f8f1c3fa18e909fe028d612d56df7cd4f9ad0c3a2b521cb58e49f3925d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbupdatrV5.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7.8MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 697ae65b058cd9c6072df856b68a3efd43249e74a8e4d2864c68d491ba0c1d47
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            307de386-fcb5-4016-81ae-73cb6bf1cb22.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\307de386-fcb5-4016-81ae-73cb6bf1cb22.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6c559f0dedcbf16ad1b6a5cc41cc14de5dc565a1b35b99cc6163633b422a5505
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7d8261e9-ab5e-4047-8ea1-b4ea9cd793fc.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\7d8261e9-ab5e-4047-8ea1-b4ea9cd793fc.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 105KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 346ea60a0ae4d17c01949616e7832cf3b359983afcbb7e8912fe8a59321ed461
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            protocols.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            autofill_bypass_cache_forms.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 161B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            edge_autofill_global_block_list.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            v1FieldTypes.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 509KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            crl-set

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 10df0b8045cec759883a0c486c3f769c8adf910059676206e876a4fde03e2162
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 39129ed268d329220c65e3a335ea5e79bfc0f11a96823563973a8cce36483e03
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e087fb4cd02a19166ecadfefa45deab8c7183e137fc3b7bfc9cc2b1381f85021
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 eb8498a6e7a7e736844be86b5f773ed7da69964cbda124c3b71213c2d7e4d008
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5cc77a69e2933d0235ac8a539206200c479816f5bda04a32fda5a396eed16f10
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2118f3debea8e2640977d8aaf949f09ebd1208d30ba20757560f958087279634
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5b456653be6741bb3a8a04b6ad49c3009aab01cf28060ded3e7c0114f928a5a9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            9fb91318-e766-456c-9643-ffb507910930.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9fb91318-e766-456c-9643-ffb507910930.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ee3e90473c34366315009a439fc707026a2a5bb48e444e25d6f42003c706cb90
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 352B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 59d529153b3c2554ac98d7a8c40cf4a06fd324add054bce4a5ba1a1187f3872a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 275B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9fdcf8ab3b09b049c5323f188e77fca968fdc4728434b6ff86ea8ed53da86965
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0000a7

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 363KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 987520c161d9a0a6b78a6a2e9ac48fff7df21258a76f765ec62e3d7d872330bd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00019b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00019b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 170KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6bec1368d58109e6724da684c8c9788671f2a4a7d585ca6a1a8161ea0bb7ef7f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 512KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 02b0a8ad7f3e9727b28cebc2ee1663712b990da7cc10dd96025420be6315dc94
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 512KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4cd087fa77488d3127bde4400d97d31e70f42f49498b461fce48caa03118abc0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a2

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 512KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0e169dfd532e84c92cc907faf5b74f77c485659a069564f3fb4df09db5d7d473
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 04de4b822cda39d55bd6ebde97c09a578a4f63242e7cf804977da383fab17618
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 46625c71330e00bf530bdf3eeef84fb33201971bee38d1e8edd9b71394c05dc9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a6

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 55KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d8204a264efd7b1935aabbc7c85fc471bb88bbc9016808a165f8e063a2f5cdba
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a7

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 59KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c722c19fc53a8cf11507511be0a0f425d256d0edfaa0c43b9177dbd9d4a538fd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a8

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 40KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4eddf31e1b6675fc5c8af13ae334efabbe89cf75acb918f129e8fcac967a78e0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001a9

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 193dc0e32aaeaed8373689a34903a7a869eeec406306b0e054513bbc229ae432
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001b6

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2bdf502438eaa7f8c2cc5073703cbb2934826523b73835f9f583e58fbf2b68b7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001c3

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001c3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8b69806da7af9d278c787b1dd6e93e4026a63ecc001af48ebd51e8edfd776b8a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001d5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001d5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 62KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001d6

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001d6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 68KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4ad601c70ed7615e044931de2d0d9c24efdb78df38eeafb5b31128b73c608705
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001d7

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001d8

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001d8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 63KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_0001d9

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001d9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 346ea97ec5aa47587d93e6347417ac2f9f9e7c85adf447c627a04af5926d08fe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00021d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00021d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 97KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c3d673ea8cff634fd51ed080143b042541a681b86545c7f58d6b31814bd2a066
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00021e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00021e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d90a5a8fe12987036c18cfeceb5556006fdc28b102c3b2c10a4652ac71a78b69
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000220

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1508c16bef8702f3eb9dabf9352a20053b2bb1d30e65403e4f9c3835daa48a93
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00025e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00025e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e1f066180e2f7e814b52044bb070ae7a2eb72e916200160efe5520eaa86efa0c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00032b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00032b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 263fcc85ee36d37bd7da6117a70ebd90231ae29632470828b47b0465d9b7376b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000354

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000354
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 91KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0c77a519f5125be68d85359333a86af6c9539682a748f296dc1c983687750ea5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000356

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 56KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8d1bc0a5812f70a63370eebfa7220c8ef991dac20026b96171a46bb4dcce9db0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000357

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000357
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 172KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 62f458309776e36f6b54fc40f2dd6e1f4c913f6f9136b771e87ff54201c46871
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00035a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00035a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 daaf2addc0f4e5366668d292c5bad10a10dbb083741c4877a2fca082aae3e250
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00035b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00035b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 21240ede58aeacbb8a52c676cc1740a3f7b721ff392415f72f540ff91328bd7c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00035d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00035d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 56aa27b1c83aa8c9ac97a48dc05788b3acacc1c647aba6376f7e0afa012d17b1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00035f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00035f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b99717adb93edd7e673acc07297848cf83d7802b6ead0d1d3623608e11f498c7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000360

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000360
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 123643df8e9d547822c74a47db35d0bcafe2d6309b8bf1a0e4e0ca8e6aa01ae2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000361

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000361
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 445a5763138342153d274c28f1f75fe5f2e0dbbed84f82e66e7336b5009fe978
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000362

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000362
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 69673d64b5818134e76aba4558b018523f02dd2e9c8fb0cb09259ca82e93504a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000363

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000363
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 109KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c05d0ad81ef0013e044cdd4ccbe373ff14a36eaebb798f11f38b986fe4d00833
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000364

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000364
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 44KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2ed409f178d3deb7eba4a9cccbb4c2a9b25764a91b1b45b7462b6902c73ae560
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000365

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000365
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 901e7a607a584d7890a9fc0400e0d93ba6bbd42e5f3821fdced04e3d15b8db0f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00036d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00036d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 53bf7b1e661502bfcfe2ac1cfda70a8e7962ad6dcff1a620058a0cd71b45e608
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00036e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00036e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b7b246d59b35de3415420313079e0894176270840578e0ab35402370c0e55ac1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c6b7e0aff8b0a86132bb55156630fa82a7c72e8372d9346e214e73e9f68defbb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6898cb6299024aee4863baa0b00f6eef7a9e17fce3c19a85c20065b0abc3041f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 681fb7989a6535fd3bd223e7f24f41baee2a2e02ae5157f855b397812d3d127e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5a5b17cad1a86ff200325e4bda4ee31684ba853ed7382e458749241f7c512bfc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cfce932dfa0ee4afd81e6f9235c851a4b8d483010f934feb1d3fc42be5377a7c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4f1919cf6b3bd2f94ba84f17c2f31d38c66cbb715ebd9c3acbc8d0db40eb0785
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6c68a1bea6269b2a9a21a377b451c7876b01c4cad320e85e284f3c0b6f1dd600
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e0d8299a7505f949ff09955bf975926ae0aaff7b74b154d62353fd8b78e8a4b5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f132cece11ccc3ddcae9f075541167ba02d71e6858c7cc8741bd7181c7efe0bb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 78f9f78551b7df12bb85b4e3bb94b26d42366b4c67b2c2b6f9953250c758cd3f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cc05a7708d78ef63d5728b6d762f7f4de6e1957b8cca24a38f677df9b124ef1e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 265e1f4c23827c905f8183b1b5071446429b1189cae6a5c8fae15e5d6ab37c97
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data_1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 264KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 76d3365cd0cc0ec79b162733570492f6aae59021cc8ab2c6fdb9394e4ec6860c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SiteList-Enterprise.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Edge Profile.ico

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            HubApps

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 106KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            000003.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2dd110d5fd69fbc3db917716340b44f0dd84d92bff40283ec132cd2dd1eb0ad4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LOG

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 386B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a318891ae9d71ad0fa755084e9e2f994c6a55ebbc3fb2adb00ec92c1b812e131
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 23B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4245110e-cc68-4c77-8c11-bc2405595867.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4245110e-cc68-4c77-8c11-bc2405595867.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 01d4784661e31e83aff86ce31b4a5cc96b62aebb5ae6d79c50a9f0f8743ac6c3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 338e727dd5e8bc554074a92c98e9012f3e1d20404c78074c7112e5e4502e66a1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 686B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c02e28b5c101b135b659536ffbd3487f2f2a4f0263a8c8d39c291d21e45a8956
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 111B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 afe791135de77a08275e2fbb7f6c6ba62bdfef4b3c958f4c358e9b3fa747051f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fc6b498d0df802042f9b82319616b804f8ff83ef421216f9304314058ad44532
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3ea0d6b5c5afebef369e9279edef052c05aa85d7bbd0eb262a49489dd1bddee5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fb01bd4b4c02e86e2c91442a8b13bead29080d1ad97ed635d335100ae3aec5d5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 16ab21e49dc3f8eba328db9056ca3f966da136f79cc86be49d96d4bcace5ecd2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ce05bbe4245836d035cadfb0e6c2f3b8ae9d74a2bb5e57dff5cd8909edf48dcf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 09d2dbeb2474624fd6a08be2bb8dfb6040363dab76c6372cfadbeb42fba2ff37
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 736B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6e10c2b89ea32a7cc727f50aff21fcb81f9611c1e3c23f743298d498098bcf58
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4b9429b3a34e2bdbf5282e9d8eadcd6ab805772560f5287cfa0981174c7fa760
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 211B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 eac26e70ca6290bbc2ebb603cd955cc2c3b0f6dbd4df8050224396ab0455ea8e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 211B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5dd4c05736723ba5ebda8380c63829d413a10358d6b71f9c8fda8c22f88dd03f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 211B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b37a99bc0c65ad313f47869f8d86a0c95b5a63c120890f2a4a227be2517a5a84
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 211B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0ed041de373d3b80f8f2fd915d74d5af55e3f1eb35322a4519854bcef82fcdf5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TransportSecurity

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 188B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c7205399399230e24a82be79abca4809e0b4f96cf4482b5eac6cf8a2b730c10c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            a1606163-dcd9-4b82-8b52-54526d01b5de.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a1606163-dcd9-4b82-8b52-54526d01b5de.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8fde0bfc9ea69c512c56dff938e87fe97c3c07b3c62677fe3956e4cfdf32a87d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5dd1a575a0a3ef7937ed0633331f3aeeb55f0de7fe957a30c6db58120780985d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 70f48a82597e0a43a352c9fdd16106ea6ef1e543ef6ed9ec859d521dae67468f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 51KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 191965dbeb506a531217fed95e39dde4e3141a7df401cb9e2cbfe7737ed0abea
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 46f1e133d1e011f2309b94f2a1e55aac71389b0a3d64ff66993d2be8cf23cf5f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 51KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 383ecf8cf5c991b275ed6e5b98522dfd6971657df5a21fce2de6d22bf6950ad6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b086bd87ade678c52f140bcd20bc9c1b8cce455d43a6c49910400609bb631b97
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5cbdfbe531760e73925f3680901aa1ebc0619d08c66b5461f900c553d86646c2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 52KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a18d92d743ea8925cf1811bcebd5ee95f6f7bc7a90dbddb749cf85364012f605
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 44KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1911c901262be07d2725c777b3e4dbad9a5d9f27554a52f721c776f672cad055
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cdf23805080dc68318abde6284bae5793224c26a575477ec02d49a724d8b84c5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 35KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e3a77af3a2c4cf89b95a1b49484c149fdc96b86ccaa35f8bd656bdec1942016c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 35KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1b1bc6a85f56158469bc267dbb1c1902c9863eb2ab6653faf07d23ab335c85ad
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2d6bf275493b1989e91a27bf2a012b950beaf3ac\049a2c34-b79b-4093-8f35-021643130275\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a0de7653dafd7e551c95a17f0d7c46d079f6f31a870055f0c13d4f3a3034c58e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index~RFe6090ca.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2d6bf275493b1989e91a27bf2a012b950beaf3ac\049a2c34-b79b-4093-8f35-021643130275\index-dir\the-real-index~RFe6090ca.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b2f4c78684da548063b4c8f2c853aa503d80b28a4e7e434dfa72f66f307c1f53
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2d6bf275493b1989e91a27bf2a012b950beaf3ac\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 172B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 682a8cfa908a0c5d7e84de11c840a6f9e5871d0b367ee89d1cbadb1f444dc2a1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt~RFe6090f9.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2d6bf275493b1989e91a27bf2a012b950beaf3ac\index.txt~RFe6090f9.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 177B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4ddefadbce4fe7440e2473eade446d8171fb0b3ddf06d4749abd6d5aa8ca8db7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\38efcfc5-d8cd-4852-9a2f-8087fe5febd5\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 db14bfc6882cbab64dc2dce3c0b062dddf69bfe099b9abf470fd6250769a6c56
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\38efcfc5-d8cd-4852-9a2f-8087fe5febd5\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 74bc36ecce8128947605ddbad55664f5a07cebaff43129b208f366a810b04d2b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index~RFe5da8e5.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\38efcfc5-d8cd-4852-9a2f-8087fe5febd5\index-dir\the-real-index~RFe5da8e5.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f0ddbf74fb6b8c9bedfbb5c66add5d8cab05c44aa838d3a7ffdf34e4f48c8f5c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41d0daff-dc64-412b-973e-62a880cc9558\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 49b1b7229ffe051a88c28925aabef9b9e213c6c5e8dcb3d5747bcb4885e76d3c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41d0daff-dc64-412b-973e-62a880cc9558\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5c14cd3aa8bbf34b16d9013daef67ecdcc9d648ac2ec922fa4273f549c451db2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41d0daff-dc64-412b-973e-62a880cc9558\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d09b06ffb3959850f7eb23844f2e0ef9622bd5dc65b4bcc0137aa04c87dd0849
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            todelete_4f2277ea2139c475_0_1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41d0daff-dc64-412b-973e-62a880cc9558\todelete_4f2277ea2139c475_0_1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 65KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c74872725b714c356c2fcd6e901b6a930a924d8cb5318624c07f9f1058a99550
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            623cd082b6202da0_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c18bc84c-7d94-4d9d-999a-e0c172c621e4\623cd082b6202da0_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 65KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 14dec25b28efdb487a88213fae51ea731cda5ef1bee24f008290593196621338
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c18bc84c-7d94-4d9d-999a-e0c172c621e4\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 85aeb25f1a3d3063c1fdbd62887ca976f23f04329e5e36ccc7489c918028f6fb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c18bc84c-7d94-4d9d-999a-e0c172c621e4\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c1393a768d91b9409856c00d1ae2a7c6e4b4666de0e3dfdbf0a7f973c79c2b78
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c18bc84c-7d94-4d9d-999a-e0c172c621e4\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1c7c6b7f034e040fa00d5e1412cba4e042c7b5de24b17ed48ed5aedde2e834e7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c18bc84c-7d94-4d9d-999a-e0c172c621e4\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ac0df4eda6ac7806dc47ae8d83e02dd20e0915a0aa377c57f0ac91211bd173bb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d0e21938-a6d0-4498-b641-65d55fa49ab6\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 29233a5ac781fbb702c92748dc8132d0f8392eaf8f1b4d94a369c724aeea796e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d0e21938-a6d0-4498-b641-65d55fa49ab6\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fb8ea8fb0ce2f95dcf0ea8618573028388fa9fcfa5b1a2e53f5cfea74e014ebc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d0e21938-a6d0-4498-b641-65d55fa49ab6\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 460abcded68bc8bedd937de0072008776f0dbc26225fd4f9ce16407b69ce6649
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index~RFe5ef9df.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d0e21938-a6d0-4498-b641-65d55fa49ab6\index-dir\the-real-index~RFe5ef9df.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 496195d0a11b1e232569cced0de21da3228dfd8ef6c361b1e558aa119bfd71a4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 371B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2176ac30b5d9be956ab99b4a94ef7334616f4e5ec59f400b196a4ba01a4b7793
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 476B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f7290c62341b18afcc60294727b7bebc70dfd530bf42132e0cff7c927179e3f3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 481B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 70cdc53867b7b04216f4044905f20920696be5ae777f44e0e9e91d413b9b5de0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 476B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 10a362a40327afa4ac0d07277f66ab5dc8bf2f1bf6389411a1ec9b2a275f84e4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 476B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c9f9136f2b56ccfb318fa3046a2a34989163fef054eff75ab921e869f53b80ba
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            297ecea5cebb5dfe_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 320838c9bed7b5de8b0a81dc5dcb603a3bec7cf2e065f9b3b8e0757b3a848383
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ba23d8ecda68de77_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 109KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 35e6a3839aa59d332d752894fe3dbd4d62001e357b42ab16d6f9710dc03c5289
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ba23d8ecda68de77_1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 193KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 760513d60bffe892db301e64219e2fe02e7ac8435654b795dfbedad02752fdd1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0aedf683b728fb7a164b8ea730d91f4ef574836adf6551a86bf27f3027c2ca63
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1ebdd13ed9eb99b420f4fc96923bad0505d178ea3e9c077c02894bb9324d58c0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fd98c0190d44da0fb1b64a43ebbabae644f656e9774deacda9ac1cb00308b21f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index~RFe5e0221.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5e0221.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f678d9294a5154b553589376d09010bcb41da1d8b4be991d03470dbfc1b798e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sync_diagnostic.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 002dc8803c347818121b54d2134c87cb06261015a5787bc4f7b0077c694c906c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CURRENT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 41B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 145KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OperationConfig

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OperationConfig~RFe5bd01e.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5bd01e.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            office_endpoints_list.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fadd87d41e43a40004abc1eb969d91cba656044d6aa69383cd789a08f2f09828
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3a75ee95dfd7c3767cc7a4d39ed00cfe11329884ddbfa00e7c167ddc670674da
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d9817a800322a4f5611a7338ada221910cf4c77f24e991389c34d0787fa6829e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e890dd384733a02b517d863ea3350deba816de175a5804b3865d246c0844e4db
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 944c24a49b6cdbe965452a747408a61e35b51422da6d572f077b2719667c5a1c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d67ee4e2b16339d5ee823c3429e5826597b362a2e56c2cda2995fb26ae47df40
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0363735eeae067c463859b481cd38ce9bcb6264b86f09ef833842e02b3e8f3a8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5d812f976faae3d4d0ab297ae83d8eb6515a41e75f10ded38b122e9d369267f2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5c00a5aec3d32bd8d5f84198a4bb313269682a3b4d27050f9debca881cd1a395
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 54596ee0dfa5a24a02918424c45408d74871b96b3764d7bba60a62f6f04965eb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 83fec23de52701c5057d94ad27ad2fe11511a69962e17f5ff30807771d1e8b9c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b4f8c48671bc38f45896cb88ce9cedc77d93ef249916d5f1f8b9d3022fa5b083
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3c521962c121d992d6cd517f55a4e6b8e38f41e7119068e21ceb4e123f1d35c4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5fe0a03e131a32167295c1398d53935d5298aeaeb45a41cf50a412a241c57776
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 78d53417f5a8c4ce37933c9de75465f8eb1b10550cdf76454257b07860127cfe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3f360364eab7fbb5c5992bc8a29427d6a604c52f45f83d12ac04dc2f2c4f7a30
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 92b9f5e97f7b0a62b1b379c5ede52a4ce1e2ccd302cd441763078e798c74dcaa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.7\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            crs.pb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 233KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ct_config.pb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            kp_pinslist.pb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c9dfe2d1c87e1b9fe7a5dfb7ea0fd1c919249ca6659aea30c14a307205159999
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 607d3eafa24860d9f5b46ff8ec37bcc678cd0c44d8bc97523414db6e2afb2e0e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 dcc62e0732d303fadbd6fb9e881e763995373420447c7bae0e618014ad32be55
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a3c4b5f46baad9e0463c32f43f5da4664eeb35ebf32c9c3af5f3be5f5a9d2f21
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 16da9e2890aba66ebd42cc9a9e376b7b806aaccc366896e036bd1b79234648ff
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1fc86f2ca844eba7be528100b1f9417ac79f340e9360e284889c98dfe0c59ae5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6c1d8a634098865c7755080df046dd9770b774f82bce6113aedbccd86b9e62f7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a2686d8c6b7074eef117cfcb331d089fec41e20eb152c268c7265b8e22abbacc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7bcadca93a9335213a64a7a578fef55aeafa90c4aeb005919fa4366d3ab7eedb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 95d868a33c257958e4db77ea33093097312deb1f91cbd728b38af06af8e161c9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6d19297f5643a610635c8a00cdd71df6f97cc87bf3e5115837cb47c184db28a0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7b637cf3ddc8833287b85ee2d20ddb63ef0a54a18c8913363593407c4b729efd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2bb1af94e028c3ec313ec9bd232c44e82f9b0384e76ca204f8f2ef21b17eed43
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 eef421435a49729115b4e8b88ea314f8d6601b267469e5bc7460d8c07874ca9f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4fac0c66410d596716ca4e25fd254257b6ce509b000c0a2e116edd747811f644
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b370ae18ccda9910ff186c199248e6c3324a259a390ff782fb3055603ca848d5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f28ffd44f954a217c34ef65b1d97b5183c75f78dd8d00e52cd9079ef08d3e51b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 78049d6dc285a1549f74f3c22c97f02aafeb5985ad8bb12b02a77789ca5ffdd8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 361fc8b708395b0a137b5d9c6cb777e39c7ceaae1b842a09347bd7947a433986
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6b4ad2a529fad1aa1cee7a1e7deca506aee8c33b4ee2296023ec15dd9ed34975
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter~RFe5c2979.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5c2979.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 66e3ed88e3de2df75b7463e31fb8fbe6631ca21b534f8945d183a85c2316faf5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            safety_tips.pb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 163KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            typosquatting_list.pb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Advertising

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Analytics

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CompatExceptions

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 689B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Content

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Cryptomining

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 668B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Entities

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 68KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Fingerprinting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LICENSE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Other

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 34B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Social

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 754B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TransparentAdvertisers

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 105B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Advertising

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Analytics

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Content

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Cryptomining

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 32B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Entities

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 106KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Fingerprinting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LICENSE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Other

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 198B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Social

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            keys.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            typosquatting_list.pb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            well_known_domains.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 572KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            nav_config.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 852B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 732B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 132B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 372B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 252B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 492B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cdacf065a512a39160e98142a6f893086e69d3299d4aa2cc2c717d03aa2518a3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e3c95bd14c34d8e3b7528cb43c7236b0239c754a236e715e058094c9c4e8ab29
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 38327a26efc18f1f0f165ec1a5056d4cd862c3d6ffd09a5cf49acb85f6cb2cbb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 972B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5c220d43256d7b7c14b900fd4eebfd1eca6e209cfec86546e89032558d063e17
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d06ee63cf14c15bbf76574453fd32c1612782df89c8ff41ff990d1745b65948d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9067b28ebe20c02c9953fff5b0594ef49080bdf69debedc37cf9eb19498d7c06
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 612B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bce6285177c4e7de899eda446b39325b8295ac94e3d7d3219210ea35d2d6b77a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2af2dafa-d0d7-406c-b665-a29e988e9166.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2af2dafa-d0d7-406c-b665-a29e988e9166.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e7d19f02ed88e7591be36a0d0e48b2016fb74c038a176a41c1aa9bc95753c4b9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            0001.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6beae61ac55708892f869336fbf24f5987b433d3abe54f00bb69a098715caa1f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            76539914-2cf0-4a7d-8a47-22ad48128cde.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\76539914-2cf0-4a7d-8a47-22ad48128cde.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            084ba705-c530-4826-8fcf-6bbe14e03664.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4568_2132557338\084ba705-c530-4826-8fcf-6bbe14e03664.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            content_new.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4568_2132557338\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            bd5b2742-a9cb-4171-b073-6223ad844bcd.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4568_398357731\bd5b2742-a9cb-4171-b073-6223ad844bcd.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 147KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MBSetup.exe.crdownload

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Downloads\MBSetup.exe.crdownload
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7e373eec574cc081b3864ae49ba0c8022d8c94fd88cd634458d41f1086d4f586
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            NavaShield.zip.crdownload

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Downloads\NavaShield.zip.crdownload
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 9.3MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3adb8147e461a11add25101d78205b61b54b6993022c8014b9a55b3197ca39c9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbtun.cat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\DriverStore\Temp\{01e00d78-31ab-4a4a-ab68-2a188be027e7}\mbtun.cat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbtun.sys

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\DriverStore\Temp\{01e00d78-31ab-4a4a-ab68-2a188be027e7}\mbtun.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 107KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1F657678CDAD5400251B323D207EA54F

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F657678CDAD5400251B323D207EA54F
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9cbf22fae0dd53a7395556ce6154aa14a0d03360aa8c51cfea05d1fd8819e043
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            F9C57C8B55E84B295CBBD8CF3D95BF44

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F9C57C8B55E84B295CBBD8CF3D95BF44
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 56da8722afd94066ffe1e4595473a4854892b843a0827d53fb7d8f4aeed1e18b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1F657678CDAD5400251B323D207EA54F

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F657678CDAD5400251B323D207EA54F
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 242B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 73fe49a65f48bdacda8caa269244b2af1febe5a1cfea889c6b962b492d8d294f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            F9C57C8B55E84B295CBBD8CF3D95BF44

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F9C57C8B55E84B295CBBD8CF3D95BF44
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 256B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2c5c9106e6f8a2fec16425a787a4278f2d680ab5e0dd0fe432058293240dd3c3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MbamChameleon.sys

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\drivers\MbamChameleon.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 230KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 44aed351c604e5289e3e03849106480e7080354696f700403560d242319d3b3f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            mbamswissarmy.sys

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\System32\drivers\mbamswissarmy.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 240KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0cd62ce0cf56289cb0aa1e5330683704dc8e34c08a15407c9fdbc1948f5e12a3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            NavaBridge.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path \??\c:\Nava Labs\Nava Shield\NavaBridge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4.0MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e7f05380e90dfb15b91b8bbc2ae48a04ba84d573b3c9f7d81bcc12f814215929
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Appearance Pak.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path \??\c:\Nava Labs\Nava Shield\NavaShield Libs\Appearance Pak.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 136KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e5b3249fbeea8395fd56c20511bfcfdb2b2632d3c8d517b943466a4e47f97b5c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            NavaShield.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path \??\c:\Nava Labs\Nava Shield\NavaShield.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 23.8MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fce1bc05fbe2de83ee535e5ce0ceee94f2b4f917cdcbe1f1f649f44be25d4ec8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            config.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path \??\c:\Nava Labs\Nava Shield\config.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3b0b2ff80e4cb31c3c6ec9e00c0f3f2ec9cc5a5d6e4c6648dc79dfdf7e06ed01
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/396-11440-0x000001B073150000-0x000001B07321D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/396-10666-0x000001B0736E0000-0x000001B0736EC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/396-11327-0x000001B073150000-0x000001B07321D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/396-12060-0x000001B073150000-0x000001B07321D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/396-10665-0x000001B073150000-0x000001B07321D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-1116-0x0000000004160000-0x000000000417A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-3111-0x0000000002480000-0x0000000002553000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-1112-0x0000000004120000-0x0000000004132000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-10380-0x0000000002480000-0x0000000002553000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-9284-0x0000000002480000-0x0000000002553000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-1138-0x0000000002480000-0x0000000002553000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-1173-0x0000000002480000-0x0000000002553000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1052-1139-0x0000000069F80000-0x0000000069F88000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1140-9275-0x0000027EE7740000-0x0000027EE780D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1264-8236-0x0000025DDEEC0000-0x0000025DDEF8D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2332-1137-0x00000000024A0000-0x0000000002573000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2332-1129-0x00000000025A0000-0x00000000025B2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2332-1132-0x00000000025D0000-0x00000000025EA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/3504-11385-0x000001679AED0000-0x000001679AF9D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/3752-8674-0x000002071BB10000-0x000002071BBDD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/3752-8675-0x000002071BA00000-0x000002071BA0C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5160-1123-0x0000000000400000-0x000000000047A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5160-1124-0x0000000002220000-0x00000000022F3000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5160-1136-0x0000000002220000-0x00000000022F3000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5160-1135-0x0000000000400000-0x000000000047A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5524-1159-0x0000000002A40000-0x0000000002A5A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5524-1155-0x0000000002A10000-0x0000000002A22000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5524-1175-0x0000000002430000-0x0000000002503000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5524-2470-0x0000000002430000-0x0000000002503000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5548-2471-0x00000000024C0000-0x0000000002593000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5548-1176-0x00000000024C0000-0x0000000002593000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5548-2472-0x0000000003A40000-0x0000000003A4A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5776-1172-0x0000000002450000-0x0000000002523000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5916-1708-0x0000020D13130000-0x0000020D131FD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5984-870-0x000001BD1FA80000-0x000001BD1FB4D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6012-8265-0x000001F3F5F90000-0x000001F3F605D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6072-2493-0x0000023F97000000-0x0000023F970CD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6156-8234-0x000001E9E0AB0000-0x000001E9E0ABC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6624-12397-0x000001A8784C0000-0x000001A87858D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6776-11563-0x000002EA64F00000-0x000002EA64FCD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6776-11532-0x000002EA64F00000-0x000002EA64FCD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6828-11998-0x000001C3CEDF0000-0x000001C3CEEBD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6976-9270-0x0000000003200000-0x00000000032D3000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7064-3682-0x0000019DCA0A0000-0x0000019DCA16D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7356-13870-0x0000017D62930000-0x0000017D629FD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7472-12135-0x000001659AD30000-0x000001659ADFD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7472-12262-0x000001659AD30000-0x000001659ADFD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7672-11165-0x000001AFD44A0000-0x000001AFD44AC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7672-10837-0x000001AFAF070000-0x000001AFAF13D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7672-10889-0x000001AFAF070000-0x000001AFAF13D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/8076-10144-0x00000259D2B00000-0x00000259D2BCD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/8076-10145-0x00000259D30D0000-0x00000259D30DC000-memory.dmp