Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-ltsc_2021-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    870s
  • max time network
    858s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    18/05/2026, 14:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://cdn.discordapp.com/attachments/1501670413095141548/1504166962228367490/VendettaMenu.dll?ex=6a0beee5&is=6a0a9d65&hm=9751e71803e7e8dcadc4b9103ffa654d1e1fbb123a287fb3abdb43e11dc8fa07&
  • Sample260518-scf5qaev8t
Score
8/10
adwarediscoverypersistenceransomwarespyware

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Looks up external IP address via web service 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 36 IoCs
  • Suspicious use of SetWindowsHookEx 21 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cdn.discordapp.com/attachments/1501670413095141548/1504166962228367490/VendettaMenu.dll?ex=6a0beee5&is=6a0a9d65&hm=9751e71803e7e8dcadc4b9103ffa654d1e1fbb123a287fb3abdb43e11dc8fa07&
    1⤵
    • Drops file in Windows directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1460
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7ff9afa3c188,0x7ff9afa3c194,0x7ff9afa3c1a0
      2⤵
        PID:4828
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1796,i,5306821498448713639,11476732963501059473,262144 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:2
        2⤵
          PID:5788
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,16726789882061147301,762929391032258313,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:3
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:3048
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,12066741487332838064,8054005576053750105,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:8
          2⤵
            PID:1040
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,5933502088993031509,17158979911273702184,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
            2⤵
              PID:6068
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,7927465490693043763,1145181019598395136,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
              2⤵
                PID:3448
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,1130020644285432962,5872766944704057228,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
                2⤵
                  PID:4164
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,1046006353228517985,9362132399589912094,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
                  2⤵
                    PID:5744
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,2947062128169590340,5863455466948415821,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:8
                    2⤵
                      PID:5712
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5712,i,12423807132501777942,17575618047753785675,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:1
                      2⤵
                        PID:5548
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,6726977385351246082,9014214756245976701,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
                        2⤵
                          PID:2912
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,6701901311703659661,2830980494868838240,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
                          2⤵
                            PID:3856
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,12031797812252875199,9015750873497587644,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
                            2⤵
                              PID:3176
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,12031797812252875199,9015750873497587644,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
                              2⤵
                                PID:1776
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6252,i,4919253557511612276,18438510444853656046,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
                                2⤵
                                  PID:636
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,98940068077448614,12353101704564589180,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
                                  2⤵
                                    PID:5764
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,13553096367516563273,7137657041963367955,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
                                    2⤵
                                      PID:1620
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,2615494330295116077,14728089788345892473,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
                                      2⤵
                                        PID:2260
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,1498205546909308638,108513815135629716,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:8
                                        2⤵
                                          PID:1240
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7164,i,9528267306687903603,3215077543500215831,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:8
                                          2⤵
                                            PID:4080
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7148,i,12780093752147876856,7336359518002112545,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
                                            2⤵
                                              PID:3868
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,8490121438972344612,479117070409890189,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
                                              2⤵
                                                PID:4068
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,8490121438972344612,479117070409890189,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
                                                2⤵
                                                  PID:228
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4876,i,216855214343558017,9508361577695231758,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
                                                  2⤵
                                                    PID:4340
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3668,i,18083844448635013893,8251385141475632363,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
                                                    2⤵
                                                      PID:4512
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,14007599653186488824,6007824099860093050,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
                                                      2⤵
                                                        PID:404
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,8370738837903735068,8791092234926404465,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
                                                        2⤵
                                                          PID:5452
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5100,i,9301283692820188580,14128015763465115946,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
                                                          2⤵
                                                            PID:3148
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5268,i,11985158021361491683,1554130316767406131,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:1
                                                            2⤵
                                                              PID:2124
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,2413092632548977171,14023489556873742642,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
                                                              2⤵
                                                                PID:2304
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,12358691485614559291,2920705783198662868,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:8
                                                                2⤵
                                                                  PID:1860
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2528,i,8016961822670764509,97191500461029079,262144 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:8
                                                                  2⤵
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  PID:3836
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5332,i,8727984452535615723,3833644711921588820,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
                                                                  2⤵
                                                                    PID:2460
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=136,i,18171020183189479933,12300315485578925550,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:8
                                                                    2⤵
                                                                      PID:4840
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6196,i,13568595197925997304,9477402293980367621,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=1244 /prefetch:1
                                                                      2⤵
                                                                        PID:4540
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6960,i,9894010198258035662,4792580889676765987,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:1
                                                                        2⤵
                                                                          PID:5552
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6000,i,5771994681281693914,1968435151765220303,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:1
                                                                          2⤵
                                                                            PID:2144
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7304,i,11019469914037451809,7836230698013857673,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
                                                                            2⤵
                                                                              PID:2492
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7284,i,2759816416991766520,11259262905402705044,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:1
                                                                              2⤵
                                                                                PID:4676
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7756,i,5375433398114498037,6805447211345821139,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:8
                                                                                2⤵
                                                                                • Modifies registry class
                                                                                • Suspicious use of SetWindowsHookEx
                                                                                PID:756
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7960,i,13163885320605673343,17033182521076964810,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
                                                                                2⤵
                                                                                  PID:5952
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7940,i,236990347438014229,2968055071145488361,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8076 /prefetch:1
                                                                                  2⤵
                                                                                    PID:1584
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7600,i,2220499447000386586,12035279157062242111,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:8
                                                                                    2⤵
                                                                                    • Modifies registry class
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:1748
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8044,i,1208965069198732481,12283362785171403928,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:1
                                                                                    2⤵
                                                                                      PID:3740
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8016,i,1474451458012178763,5092479371363708488,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:1
                                                                                      2⤵
                                                                                        PID:2704
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,12823975936709833565,7829992886869727553,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:8
                                                                                        2⤵
                                                                                          PID:1796
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8216,i,10175841279995291568,7959303985339346317,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:1
                                                                                          2⤵
                                                                                            PID:892
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8388,i,14420814573228795773,14841555722351462475,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:1
                                                                                            2⤵
                                                                                              PID:2008
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8560,i,2424273886788546957,16510697242818451848,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
                                                                                              2⤵
                                                                                                PID:4860
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8272,i,15578524442028169112,11626685428817613198,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8712 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:2304
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8864,i,3061314732792932462,7628411721267040690,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8836 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5952
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8992,i,9854130498171343864,7825714483710634099,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8996 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:6088
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9184,i,9702398942537155978,681692190703079498,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7860 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:1780
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=7864,i,1109703794221871919,4282593257498531668,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8704 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:3648
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9312,i,2402707963298416055,7749595768095908758,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=9336 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5968
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9472,i,8578923002779362721,8933996225580020892,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=9488 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:32
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9628,i,4089056198708641647,2131842921009883193,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=9640 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:3664
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9776,i,12734082248442911642,3910858190875590722,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=9792 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:4136
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9928,i,14069656782098360335,13589791481366289719,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=9944 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:3264
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10084,i,15601192147532175474,2715732563130147043,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10088 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:6052
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10244,i,8232478609467771753,17973713506629166183,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10248 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5344
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9496,i,7356824432664128038,5845346954136662698,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10512 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:1240
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10528,i,2724496317220051152,7611653756353964188,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10676 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:3140
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10816,i,5918948690747734728,4130944356094848836,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10792 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:4632
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=10996,i,8462957291977017274,3781487868420099397,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10992 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:5488
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11144,i,11016365166587043037,5728613678788734490,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11160 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:2840
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11468,i,13572059172742048433,4757006370182088429,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11416 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:856
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11364,i,1532080939070869434,424155199637973146,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11488 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:3996
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=10176,i,17238072431703939453,11970497649467863822,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11564 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:892
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=8768,i,15842808922373374258,16984038810657450910,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=8744 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:3176
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=8708,i,9594101100193700844,17388229936801172007,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11684 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:1868
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=11688,i,7330911549419588462,5723526107935855201,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10856 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:2640
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=10288,i,11611471367358924089,3138712549387291856,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11720 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:5080
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=11736,i,16957405140999530917,12719851220114278307,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11332 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:2248
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=10132,i,17382821137556379442,7347384017388614435,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11880 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:1196
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=12088,i,10786507186401600568,16785778234864661961,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12044 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:5568
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=12212,i,1982078861300955278,16125500901468653898,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12228 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:5748
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=12384,i,2228577752929479021,5738012752261125620,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12088 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:6200
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=12348,i,477280237927521847,10337232918043304610,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12124 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:6264
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=12720,i,16980703196022513823,16733116467517180461,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12748 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:6328
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=12864,i,903996761100840154,4525059497558594292,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12580 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:6336
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=13008,i,10633893199953857785,17721235758246898164,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13068 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:6444
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=12600,i,16066191955718167584,3309017138215454846,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13196 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:6496
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=13376,i,17759563301007271227,7947580156958864675,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13388 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:6540
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=13332,i,13151880555145849531,10295064835836770364,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13492 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:6548
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=13660,i,11881705430053424063,3517398016671292217,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13664 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:6688
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=13656,i,3414190298059341094,6134526246985242474,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13880 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:6748
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=14000,i,3998082553500564052,10336369243887837593,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13984 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:6812
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=14128,i,16772809695428473797,6164788683538685620,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14124 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:6820
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=14272,i,9022524025661040742,2324481231486162080,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14140 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:6828
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=14460,i,322784373137267318,5027202239941558776,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14480 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:6984
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=14496,i,12296902789805245911,13813296378705849670,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13956 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:6992
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=14612,i,13493301411834024981,17240080350260061385,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14712 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:7000
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=14844,i,14506149900818103162,1551046882976564529,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14852 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:7008
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=14972,i,15069818645846757595,652675085122440881,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14988 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:7204
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=15108,i,10542959696572239152,15080158373784351807,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13344 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:7224
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=14408,i,11569046312040401658,12049032797348495392,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14524 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:7324
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=14844,i,11993036538344540792,11609125764359145702,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15376 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:7412
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=15392,i,18170214380839842680,11579498704584759597,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15488 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:7420
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12088,i,17600052074559308495,6410809299541057456,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12392 /prefetch:8
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:8156
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=11444,i,5161823325291414294,9020631981583400171,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13404 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:7448
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=10124,i,7464452635179507075,4339229802270855650,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12168 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:6976
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=13604,i,6977070103536358712,6447347219975027363,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=14132 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:1136
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=13436,i,4124538158078203494,14480371127113846535,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15524 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:7204
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=15552,i,12179481765129448673,6681414929183904533,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=10124 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:7368
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=15228,i,13805812449454358806,1566711548523209988,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15196 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:7496
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=15404,i,17303292553641085475,4462362234614292952,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15436 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:8096
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=11452,i,10564555110754975799,13927029077213942586,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15112 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:7012
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=15224,i,3463426811810806641,17348259447290933875,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7216 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:7672
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=15416,i,3354493760201027268,5819367011345590622,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:6328
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=12392,i,16982137134768209386,7172963075772994447,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=13592 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:6580
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=5520,i,12176171032551056654,10688461053700186162,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:5336
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,483881522122818238,3204225230134563687,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=12524 /prefetch:8
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:1088
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,3446470499867138634,6715153352955246545,524288 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15004 /prefetch:8
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:4868
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=12048,i,5098158740950803404,269133158630072887,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15448 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:1548
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=15644,i,13444918499541622757,9486980729932009541,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11428 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:5224
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=15196,i,6911440967716276992,9292581804412609664,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:1
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:7352
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=5880,i,5029415682380904953,6475087931310573061,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:3340
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=6264,i,16511510721216220106,720145359422530104,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=11304 /prefetch:1
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:5316
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=5880,i,13737757325402377089,10734993520830618318,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:4372
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=15348,i,16615122668404817169,13481542063816652809,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15432 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:3840
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=15356,i,2937423139024000699,5092956150810577605,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=15632 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:8032
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=6772,i,4448887637582250334,3484393067237121374,2097152 --field-trial-handle=2928,i,6437177319666608391,353086262952571747,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:4668
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                    PID:2872
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                      PID:5020
                                                                                                                                                                                                                                                    • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                                                                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                        PID:4544
                                                                                                                                                                                                                                                      • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                        C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                        PID:2468
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\Downloads\VendettaMenu (2).txtl"
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                          • Checks processor information in registry
                                                                                                                                                                                                                                                          • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                          PID:2016
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                            PID:3612
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=C7B5A8E9366FF92F516ECC7CF296DA55 --mojo-platform-channel-handle=1764 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                              PID:3364
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=3E710DD91C181408EF5867D79A84AA94 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=3E710DD91C181408EF5867D79A84AA94 --renderer-client-id=2 --mojo-platform-channel-handle=1756 --allow-no-sandbox-job /prefetch:1
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                              PID:5428
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=85F5A460F707A333CF34A9EE7921241C --mojo-platform-channel-handle=2324 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                              PID:4664
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=95199F0CF9ACF17C66F7C89D8EEA739E --mojo-platform-channel-handle=1804 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                              PID:4144
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=D1E9CBA279D68AB9C2263821B2E947E9 --mojo-platform-channel-handle=2392 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                              PID:4752
                                                                                                                                                                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                          PID:5948
                                                                                                                                                                                                                                                        • C:\Windows\system32\NOTEPAD.EXE
                                                                                                                                                                                                                                                          "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\VendettaMenu (2).txt
                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                            PID:960

                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                                                                                                Downloads

                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 524ae55519907b3ab75a388a7d8adb5b3e5bdde0aabefe20ce772a09ea687d5b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 2aafce1c037be05e4c7ebafed37cf7282f3b61da9ab3f68cb43c724193f2a4ab
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                LOG.old
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                • Size 352B
                                                                                                                                                                                                                                                                • SHA256 0efd75760d7bd4165ef3b6d22996f84038a64a74eb0eaf15ec51e8564c8ec511
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                LOG.old
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                • Size 334B
                                                                                                                                                                                                                                                                • SHA256 6bd34242d3c4ff9b346ca056c90fa815db62287f3f052022b031893061b7c612
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                MANIFEST-000001
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                                                                                                                                                • Size 268B
                                                                                                                                                                                                                                                                • SHA256 69353afc7f289759be14fd811c9bb8d7de3160fc69370822a75c5521a900fd50
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                • Size 6B
                                                                                                                                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                BrowsingTopicsState
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                                                                • Size 414B
                                                                                                                                                                                                                                                                • SHA256 82d41e48ce79e7f45d5cd716d5982bd9f6934ec44e8bd70262ef684bfd2a6c25
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00006c
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                                                                                                                                                                                                                                                • Size 170KB
                                                                                                                                                                                                                                                                • SHA256 dd8aa430cf8b7a1ec8c5ff5c194b77753e8a49815e364a31ff8a18bdde3506e1
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000070
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                                                                                                                                                                                                                                                • Size 256KB
                                                                                                                                                                                                                                                                • SHA256 dc1c6406f697b169763b4d2c9d04f9a085d983ded648dee6a7b9b0fc8f384c76
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000072
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                • SHA256 200fdbb091787d4734a0de986b250c393571cf839b83e287c9f961349847dbd3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000073
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                                                                                                                                                                                                                                • Size 128KB
                                                                                                                                                                                                                                                                • SHA256 85b6a6ec3ff4d947c9859904da096dee0e8412646ced7ddc983c1fcb8d2e485e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000074
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                                                                                                                                                                                                                                                • Size 128KB
                                                                                                                                                                                                                                                                • SHA256 0825f050d4365e786b136532ff665fdc5f7aea536174b37028c57f0ae48b269f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000075
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                                                                                                                                                                                                                                                • Size 55KB
                                                                                                                                                                                                                                                                • SHA256 e79d8fddded1b654c5d93878020c62c127eb3da3d82d19f40462a275b7afccf2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000076
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
                                                                                                                                                                                                                                                                • Size 40KB
                                                                                                                                                                                                                                                                • SHA256 7e2be93351ae8c1a825632594170ee07034718c2d5476420fcc43becb83b14ab
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000078
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
                                                                                                                                                                                                                                                                • Size 71KB
                                                                                                                                                                                                                                                                • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00007b
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                • SHA256 27a2caca312c1c92e28d5cd7f169a34cbf4eb7e6892e4b71464132f010dc1fea
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00007e
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                • SHA256 bfb6f513cefd8b9fcdd37058886898c3dcd2054c0fdc3322c7c7caf3789495da
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00007f
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                • SHA256 28773bc36a441c6e727e76f00b28d9bb9f1b28a095b3327ed259bc3b200d063e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000080
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                • SHA256 69278faaad62baed05c069c74c0dd5369ac151d5264af793e05ec81c1d9f1d0c
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000081
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                • SHA256 5278bff3092bb44951c493de620a885b6434ba5a6550f50f11e6b5aa900f1bd4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000082
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                                                                                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                                                                                                • SHA256 3f1a2775ce5ac3a5745e6bc0b1e73180c7d5e3344b34fc0c295e567cb4f8ac3a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_000083
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                • SHA256 b848beaaaddf6f0e21de35eb4065408e1b348ae2bc7e60e4cf7264d8c8b03de9
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00008c
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                                                                                                                                                                                                • Size 41KB
                                                                                                                                                                                                                                                                • SHA256 9fb7f94746cda1035aae4f70e99dd63feba3920022c5bed265846d67a5e12929
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00009a
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                • SHA256 f53ca70cf8cdbced6e473b3b88cd904c70dfacf4fa3b9620d9fa56670eeaaedd
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00009e
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                                                                                                                                                                                                • Size 39KB
                                                                                                                                                                                                                                                                • SHA256 1c07c300049f3f4d4c86c299a79f95ce79ceef877651848d46a0d2a02af4e926
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000a0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                                                                                                                                                                                                                • Size 52KB
                                                                                                                                                                                                                                                                • SHA256 b3833663892616d7167c922ba7742f149a3df1e81d30450971f6986afb3edfe0
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000a3
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                                                                                                                                                                                                                • Size 59KB
                                                                                                                                                                                                                                                                • SHA256 16f3704b9f4510544dcca81e768678478d2bb2b1b0022d1908b39a5543a8b1b9
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000a5
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                • SHA256 a5d05cb472a6b70e841a652ba455fe434e05858e6dc3bcd5c29ccbf5ac47b310
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000a7
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                • SHA256 506c30fbb12c41b7957137c5a0bcc8b0df3d590c700ac532ea67218a2eca4db3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000a8
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                • SHA256 5b7a64fa1748921636a92b7b0a206c82613b4698d20c89b19845ca0d554d29a4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000ae
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                                                                                                                                                                                                                                                • Size 62KB
                                                                                                                                                                                                                                                                • SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000af
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                                                                                                                                                                                                                                • Size 68KB
                                                                                                                                                                                                                                                                • SHA256 4ad601c70ed7615e044931de2d0d9c24efdb78df38eeafb5b31128b73c608705
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000b0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000b1
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                                                                                                                                                                                                                • Size 63KB
                                                                                                                                                                                                                                                                • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000b2
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                                                                                                                                                                                                                                                • Size 37KB
                                                                                                                                                                                                                                                                • SHA256 434227651ea94f4e750e2f487b71196f20adf5e553dcc4f747deaa7d6e48807f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000c3
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                                                                                                                                                                                                                                                • Size 363KB
                                                                                                                                                                                                                                                                • SHA256 987520c161d9a0a6b78a6a2e9ac48fff7df21258a76f765ec62e3d7d872330bd
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000c5
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                                                                                                                                                                                                                                                • Size 50KB
                                                                                                                                                                                                                                                                • SHA256 da2562016d5d73d47d29001c4d9ff7d2d254f86522a9ec1a6c5504fa8c195fd0
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000d3
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                                                                                                                                                                                                                                                • Size 33KB
                                                                                                                                                                                                                                                                • SHA256 537cbd670f6a7b37eb05a1fb9b802bc8a9efd2fc7df25ab5215becbf2e11d42e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_0000f9
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f9
                                                                                                                                                                                                                                                                • Size 75KB
                                                                                                                                                                                                                                                                • SHA256 e067965a44fa748ed6c6a5d402e94dc3fb8b771780d4fbb0f0169a11a086023b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f_00010b
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010b
                                                                                                                                                                                                                                                                • Size 42KB
                                                                                                                                                                                                                                                                • SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                • SHA256 439540ab12e2f6472a563535e8dcdf2680793355a23a2cc4d61165a4ba96f275
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                • SHA256 48e73ae51233cd4c0918dd2cd7e33ae8148c3d73e47127ea242aae42335c4a1a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index~RFe5bfcfa.TMP
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5bfcfa.TMP
                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                • SHA256 3122c74611fccfbfe97cc2efcb0076e6868d8d29aa87aff612f89534fe77f4cf
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                SiteList-Enterprise.json
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                HubApps
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                                                                                                                                                • Size 106KB
                                                                                                                                                                                                                                                                • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                000003.log
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                • SHA256 e24c6e4538a4a1342c1d9db813279efa0f6a35eabaf5184b7f3ec9a2f5cf68d5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                CURRENT
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
                                                                                                                                                                                                                                                                • Size 16B
                                                                                                                                                                                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                LOG
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                • Size 345B
                                                                                                                                                                                                                                                                • SHA256 3bd13f66398beb9a40c958da78b9f2275a82aa9f3c176be0ea15a5563a0ce745
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                MANIFEST-000001
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                • Size 23B
                                                                                                                                                                                                                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 2b335f31bc0e32ab55b917c158b7edd0602e42e683a4005a872978f9c89b48d0
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                • SHA256 1244057e2a5807dfa90335749997dafa1fe733638773f659b4d114e8dc75c814
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 39KB
                                                                                                                                                                                                                                                                • SHA256 de02b1bd4fe0177dee2f934eabf4a50050f031cfafbec8b7466d54bd9d94ac37
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 43KB
                                                                                                                                                                                                                                                                • SHA256 01ec80c52bee74550eded9d8eb53e3e6c91ea3e61c100f4a5c14da53f49cf067
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 41KB
                                                                                                                                                                                                                                                                • SHA256 78bc5c57ebd7fc1f3bb79aeb9b62d84e7697348ef7066039c0095cc0159e9912
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 35KB
                                                                                                                                                                                                                                                                • SHA256 37cc67ef28e6ee77172f745bda0e4a83d3109557bb40e902efdc65154b92de8d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Sdch Dictionaries
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 40B
                                                                                                                                                                                                                                                                • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Sdch Dictionaries
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 211B
                                                                                                                                                                                                                                                                • SHA256 20cd12fd8505508a8979099f7d7752e00bfa7e85039b12a9e0b9562347413baf
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Sdch Dictionaries
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 211B
                                                                                                                                                                                                                                                                • SHA256 a77c373244e1ad29cb666c64692e55284e461fac94a8b35719adab139f01e03e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                • SHA256 86abb3f213a6fea4103fe160aaefdae792f0c340f181ee3846d29b9149cf8577
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                • SHA256 93515a63224f6100093be7bb5f8a192c99b09a0c39bb0f768a8971830bd13f4e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                • SHA256 4eb92494d13e5ffc1e8908a97db9734b547e0e91f47e48c50d59970582aa8d76
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                • SHA256 8ddc2d204f6a6c0096d6f91e8e29ac416f79939b7ef29ba773efe24c2f89e695
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                • SHA256 05e842f22c8ada91f3297114e45c71e7c96280ea92bc7384caa545fdf53690bf
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 445KB
                                                                                                                                                                                                                                                                • SHA256 e238245f0d9db64e8b13e6fb218b0b4808520c805baf7c410be6a8254293d914
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                • Size 35KB
                                                                                                                                                                                                                                                                • SHA256 07263b1e684a336e7614d4497e4100c29167b1f956c1b48ba3974e0e7d7d0019
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                623cd082b6202da0_0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\01aaaef3-5ee9-4c0e-aad6-4003621a75d5\623cd082b6202da0_0
                                                                                                                                                                                                                                                                • Size 62KB
                                                                                                                                                                                                                                                                • SHA256 48ee4652dd4e3a69b96ae4ad16018b827ff6619499fceba8f2b3016d654bdcfb
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\01aaaef3-5ee9-4c0e-aad6-4003621a75d5\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 c305517d2041b1590392ded8970218c14389bb3a165a8776d4a180df3d3b84f3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\01aaaef3-5ee9-4c0e-aad6-4003621a75d5\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 49b8aa0a75fcc8e6ca07baf77aee798306ed7b1b5b25ff14296412e19545fe60
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\01aaaef3-5ee9-4c0e-aad6-4003621a75d5\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 e8959376345f1dc94d77ffe4801b38d0e776b78ff186a0f7ebf2ee0d56d38a6e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\01aaaef3-5ee9-4c0e-aad6-4003621a75d5\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 8c746fafed31cbd2090249caa0289883e3214f4ff21830538a48a6432ac1a061
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                4f2277ea2139c475_0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\021b1ab2-cac6-490e-8a78-24217d4e9b22\4f2277ea2139c475_0
                                                                                                                                                                                                                                                                • Size 62KB
                                                                                                                                                                                                                                                                • SHA256 3f926939854e4f0f17fb029e8de8401b2d32009edd49bd8901a9b32e2371d110
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\021b1ab2-cac6-490e-8a78-24217d4e9b22\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 cf360393e955796e6b2db26041fceaf651471311f7e80a0cf780ed893912600b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\021b1ab2-cac6-490e-8a78-24217d4e9b22\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 d2974041ba855854dc059b6cfcd264142ff23949d151e12c4a63b25ea8a14bf1
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2a8e543e-fc51-4035-9933-cd5d551c4b7d\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 e21a5ff047371acabf5bdcbb4c3e6a9653839ac71f5177aea7e46900da6cb47c
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2a8e543e-fc51-4035-9933-cd5d551c4b7d\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 d0c5d6dc72fac46e1ab5cb6b4ebaa6473f40554676ab655dd61b23e93ba9f14b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index~RFe5bc3aa.TMP
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2a8e543e-fc51-4035-9933-cd5d551c4b7d\index-dir\the-real-index~RFe5bc3aa.TMP
                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                • SHA256 479754cbe814c3fef7b2e3f53e9c8a2c6f5ab886e0d8fd0cfe12d17ff6a87255
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                190313bf4d804000_0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\190313bf4d804000_0
                                                                                                                                                                                                                                                                • Size 123KB
                                                                                                                                                                                                                                                                • SHA256 0aee8cc1c955d9601b03865ed1e6363acf8c732eb5feed57bca3e25040be15c5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                190313bf4d804000_1
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\190313bf4d804000_1
                                                                                                                                                                                                                                                                • Size 328KB
                                                                                                                                                                                                                                                                • SHA256 ec4891bab57cda56dba8488bd47a89486ec1f89ee51a05114d8dcc6d4ad68e61
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                769ab016e8e4d7a8_0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\769ab016e8e4d7a8_0
                                                                                                                                                                                                                                                                • Size 1.8MB
                                                                                                                                                                                                                                                                • SHA256 bcab475f2a68667430ffafbdb5cd3b3a7735a2a92cdc380d8bb71034655da174
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                769ab016e8e4d7a8_1
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\769ab016e8e4d7a8_1
                                                                                                                                                                                                                                                                • Size 4.1MB
                                                                                                                                                                                                                                                                • SHA256 eaed71fdae559bd305eeb7594145deae91470321ac2803f0fac92f4a29bde293
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                a15be180b0ec9651_0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\a15be180b0ec9651_0
                                                                                                                                                                                                                                                                • Size 315KB
                                                                                                                                                                                                                                                                • SHA256 2f55bfcc42a15f889bd7d8ff40e26b4ca4e5bba8498b0fe329ecba9292664658
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                a15be180b0ec9651_1
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\a15be180b0ec9651_1
                                                                                                                                                                                                                                                                • Size 612KB
                                                                                                                                                                                                                                                                • SHA256 2a9bd7836f22cb68834e63ecd140ea8472117fba73bc29defd9d76f07772578c
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 1cdb2f10bc2fcf824563350797efcb3bcd7daa933ee12ee96ed0019c8c97f4fa
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                • SHA256 00e3aa6787853bb01d9b8d24e7361233831fbf9e41baf5c9918ef1014a80f7cf
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index~RFe5af260.TMP
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff503514-5321-409b-a306-c4122e429e1a\index-dir\the-real-index~RFe5af260.TMP
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 28019e8e459f1cef2c624686f99680522e7a97a23a65e1ec8d80b842af56122f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                index.txt
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 481B
                                                                                                                                                                                                                                                                • SHA256 50baa8059a6e0d07ac13f3f4b39762093875d1d1f2c0def151cfca3f9b4bb28a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                index.txt
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 476B
                                                                                                                                                                                                                                                                • SHA256 35754759f06c86710f3dd6637ddfc8fbcb4ee55b5842b939a2636826a68a20af
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                index.txt
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 476B
                                                                                                                                                                                                                                                                • SHA256 05001a1f2a18dbdecd9228951ee948439e18778aa52de7651f34226213d04350
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                ba23d8ecda68de77_0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                                                                                                                                                                                                                • Size 168KB
                                                                                                                                                                                                                                                                • SHA256 e74899418bceedd4ad29e51bd373798e45fa07f259d64bafbddd08bd0e19ab60
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f1cdccba37924bda_0
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
                                                                                                                                                                                                                                                                • Size 117KB
                                                                                                                                                                                                                                                                • SHA256 980abfa61c21c834c80b361878f4e5870d95cbb113c560a151f6c818586654e9
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                f1cdccba37924bda_1
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
                                                                                                                                                                                                                                                                • Size 200KB
                                                                                                                                                                                                                                                                • SHA256 fb2e6fab74c19da2d9a3c879d0de1b4b692d86aed411d6d0c85252a55fffd8ba
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                • SHA256 71484b9f0d6f38b5f398274b37ba9bd841fd0a116cfcf107e2a18b725b4d8482
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                the-real-index~RFe5b61c4.TMP
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b61c4.TMP
                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                • SHA256 877bbe085cd340b1c46ebf2110177137b34f729c34630cfd877f64692e5b5fd3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                sync_diagnostic.log
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                • SHA256 784066324ab4dc3653bc8976608aee08846181500437e9bf9497b3b389c1c5bb
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 f58d76be774fa7447cdb18906e54e60410111a06767b94073d9d72c053e03871
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 868f75432ba254e416f49c141fd4c07c7b88d4c34f543523efdb00990fa441ce
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 efe04c776b124606612badf10f24ebba6b40c52d6c09df856645a59bc9c215ce
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 2268f95e56ab66f0c899855c19d7005e75de4595f0b3714379441d3e72c76f03
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                • SHA256 d2592f9d7b871c075ec8689dc1ce7b665547a2ee078573b1ab328d2682dca904
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 60947dfc9f856d821bdcddbeefee767a0e21ad6fdf903c32fa8e2a84c0fba19b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                • SHA256 9d5b5dec7c2cfd549ae81b8862bd3e678c92d76094c0c15a6eeac2b5e1fc35a8
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 db5bd6371705f0f6e9d47a9cc65b5859e67632fb691a7caf2dfc226e791e7439
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 88c18ac6002de77fa671ef29ae83ae9b8bc13383ef82389dc2a46facdfcf744b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 4824774af8439d515899dde71c5fc3987cdddbb66aa5f703ab4d6d7e49e593b2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 5230a5c2ec308d253a9a75964f863efeb2d81238502d000ec1e6c8f222ebf816
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                RevisitationBloomfilter~RFe5b125c.TMP
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b125c.TMP
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 84e84e9f6dfaf4cb7cc5b272d2ca303e87671b85505bcc76c770c682387ace65
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 372a902bb6bd593c31dc31845399a2b5b0bed569f0a2e668b7940398966641c9
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                VendettaMenu.dll.crdownload
                                                                                                                                                                                                                                                                • Path C:\Users\Admin\Downloads\VendettaMenu.dll.crdownload
                                                                                                                                                                                                                                                                • Size 251KB
                                                                                                                                                                                                                                                                • SHA256 62d0748d419293920d203df9a9da3b3cb696d39565e301bfec87b3bb06e53f94
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                Submit Download