14c869c3092778f7dcb401c705ba1cfcf760c22f3a9d5b9fc45c4467bcd81a93

Analysis

user interaction
yes
max time kernel
88s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Camomile-Virus.html
Size 13KB
Sample260625-wtsfvset2q
SHA256 14c869c3092778f7dcb401c705ba1cfcf760c22f3a9d5b9fc45c4467bcd81a93
MD5 4dc48165902340d936d5239a7bd79a80
SHA1 04a29ffcc0b19a65db4c9474e85d4cf205b86940
SHA512 563e86a581f387f1c0422ff02d7ce971e069854b4c3eb827bed62bd200c1ed224d3b7f06cc01ef5f2954135f03838725b61f8af7129ec9a18e3ff111e114ddfc
SSDEEP 192:8RroisWYx70rZBb+YlHfsCiFf6IZReUruruLsOrqiwu:Pis7x70raq/Di4DDrRid
TLSH
T189521BA7D740963F2A3D36586682283CC5D3F00BD9858E84BE9F42D31F709A95581EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4548	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134268848471488942"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{12B31536-1BE1-4671-A653-8FB753E680C7}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{671F53F8-3B4F-4B25-8CA6-FF9C7A99C1D0}	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
808	Process not Found
808	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2776 wrote to memory of 3224	2776	msedge.exe	89
PID 2776 wrote to memory of 4548	2776	msedge.exe	90
PID 2776 wrote to memory of 4116	2776	msedge.exe	91
PID 2776 wrote to memory of 4116	2776	msedge.exe	91
PID 2776 wrote to memory of 4116	2776	msedge.exe	91
PID 2776 wrote to memory of 4964	2776	msedge.exe	92
PID 2776 wrote to memory of 4964	2776	msedge.exe	92
PID 2776 wrote to memory of 1444	2776	msedge.exe	94
PID 2776 wrote to memory of 3360	2776	msedge.exe	95
PID 2776 wrote to memory of 1444	2776	msedge.exe	94
PID 2776 wrote to memory of 1444	2776	msedge.exe	94
PID 2776 wrote to memory of 3360	2776	msedge.exe	95
PID 2776 wrote to memory of 3360	2776	msedge.exe	95
PID 2776 wrote to memory of 5768	2776	msedge.exe	96
PID 2776 wrote to memory of 5768	2776	msedge.exe	96
PID 2776 wrote to memory of 5768	2776	msedge.exe	96
PID 2776 wrote to memory of 1052	2776	msedge.exe	97
PID 2776 wrote to memory of 1052	2776	msedge.exe	97
PID 2776 wrote to memory of 1052	2776	msedge.exe	97
PID 2776 wrote to memory of 3820	2776	msedge.exe	99
PID 2776 wrote to memory of 1844	2776	msedge.exe	100
PID 2776 wrote to memory of 3820	2776	msedge.exe	99
PID 2776 wrote to memory of 1844	2776	msedge.exe	100
PID 2776 wrote to memory of 2664	2776	msedge.exe	102
PID 2776 wrote to memory of 2584	2776	msedge.exe	105
PID 2776 wrote to memory of 2584	2776	msedge.exe	105
PID 2776 wrote to memory of 2584	2776	msedge.exe	105
PID 2776 wrote to memory of 3032	2776	msedge.exe	106
PID 2776 wrote to memory of 3032	2776	msedge.exe	106
PID 2776 wrote to memory of 3032	2776	msedge.exe	106
PID 2776 wrote to memory of 3384	2776	msedge.exe	107
PID 2776 wrote to memory of 3384	2776	msedge.exe	107
PID 2776 wrote to memory of 3384	2776	msedge.exe	107
PID 2776 wrote to memory of 3068	2776	msedge.exe	108
PID 2776 wrote to memory of 3068	2776	msedge.exe	108
PID 2776 wrote to memory of 3068	2776	msedge.exe	108
PID 2776 wrote to memory of 2056	2776	msedge.exe	109
PID 2776 wrote to memory of 2056	2776	msedge.exe	109
PID 2776 wrote to memory of 2056	2776	msedge.exe	109
PID 2776 wrote to memory of 1892	2776	msedge.exe	110
PID 2776 wrote to memory of 1892	2776	msedge.exe	110
PID 2776 wrote to memory of 1892	2776	msedge.exe	110
PID 2776 wrote to memory of 4508	2776	msedge.exe	111
PID 2776 wrote to memory of 4508	2776	msedge.exe	111
PID 2776 wrote to memory of 4508	2776	msedge.exe	111
PID 2776 wrote to memory of 4228	2776	msedge.exe	112
PID 2776 wrote to memory of 4228	2776	msedge.exe	112
PID 2776 wrote to memory of 4228	2776	msedge.exe	112
PID 2776 wrote to memory of 928	2776	msedge.exe	113
PID 2776 wrote to memory of 928	2776	msedge.exe	113
PID 2776 wrote to memory of 928	2776	msedge.exe	113
PID 2776 wrote to memory of 1164	2776	msedge.exe	114
PID 2776 wrote to memory of 1164	2776	msedge.exe	114
PID 2776 wrote to memory of 1164	2776	msedge.exe	114
PID 2776 wrote to memory of 2532	2776	msedge.exe	115
PID 2776 wrote to memory of 2532	2776	msedge.exe	115
PID 2776 wrote to memory of 2532	2776	msedge.exe	115
PID 2776 wrote to memory of 5748	2776	msedge.exe	116
PID 2776 wrote to memory of 5748	2776	msedge.exe	116
PID 2776 wrote to memory of 5748	2776	msedge.exe	116
PID 2776 wrote to memory of 4812	2776	msedge.exe	117
PID 2776 wrote to memory of 4812	2776	msedge.exe	117
PID 2776 wrote to memory of 4812	2776	msedge.exe	117
PID 2776 wrote to memory of 3724	2776	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Camomile-Virus.html
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2ac,0x7ffd8f40c188,0x7ffd8f40c194,0x7ffd8f40c1a0
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,9632829071751700841,2324002887500167302,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,4707250985417479969,6418026349190097332,262144 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,14564180512949073298,16422415115578117177,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:13
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,7386999544138397702,7701258191329574450,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,15160480545521370999,13428074049106055505,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,8768785634121995359,10961272523543905350,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,16294966773114713902,9794648339844768144,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:9
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,15184633602222880764,4535258832067439328,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,10145885548361263427,3665910148818099245,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,5720782719259946010,7388155829342775042,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,5720782719259946010,7388155829342775042,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3532,i,6764868644353893890,15866235061340216178,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6520,i,3615903749005611875,7645901450403255245,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6680,i,2959557375195530338,1782141729908822374,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6116,i,14484986944345965743,10264966114039573744,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6992,i,11136238763494853432,16899254010474555596,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7076,i,13223887771410560850,15507721068311541270,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7300,i,737843703004520626,8203370452003368002,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7312 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7528,i,11082526498997916403,6895707875743301011,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7444,i,13472087786429490251,3176113206089160102,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7468 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7680,i,4977265103234483496,15746554957627623232,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7920,i,2516867281898440914,3612437994399661006,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7948 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7900,i,7626618949467672744,14849561804789330778,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8096 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=8268,i,9923183187782064087,17912385031544998670,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=8444,i,3215573804253832307,2667669972192716825,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8688,i,6688152279397385710,2300679834898026806,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8732 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8744,i,17705781505791687576,210114057315762773,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8612 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=9012,i,8714848997690103049,4174657967374437943,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9024 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6968,i,1145486917630150451,8891941324723962445,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9180 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=9328,i,17619816997418732289,9672448812903311041,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9348 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=9556,i,3272849294645974069,8435386520311788385,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9624 /prefetch:1
  2⤵
  PID:6184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=9616,i,8825261714833142689,13653677090852751617,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9748 /prefetch:1
  2⤵
  PID:6192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=9628,i,205799640758940642,12051746703912481016,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9720 /prefetch:1
  2⤵
  PID:6200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10088,i,1504029430484758609,3284141495523036753,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10144 /prefetch:14
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10092,i,17185805150039088873,8024779812898247980,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10204 /prefetch:14
  2⤵
  PID:6492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10116,i,14519677876858921603,3899464192443605777,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10208 /prefetch:14
  2⤵
  PID:6500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=10128,i,14367360681080250975,4826346989949594652,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10216 /prefetch:1
  2⤵
  PID:6508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8680,i,14187150245080239003,11492145823400375040,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:1
  2⤵
  PID:6600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=10440,i,12198651744677381631,16233573003121490766,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9328 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9556,i,10311876045034038508,216976677568764221,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9652 /prefetch:1
  2⤵
  PID:6588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=10668,i,12916325153016247792,12018116914845153919,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10136 /prefetch:1
  2⤵
  PID:6844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=6976,i,8269295145385214263,17807523320706840028,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10268 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10072,i,5502744444348281928,14750057588074297726,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8604 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10760,i,1187405148817824813,2786005500801346869,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8592 /prefetch:1
  2⤵
  PID:6796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9000,i,17275751133241885063,13920936319723397252,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9392 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=10632,i,13089788689820799200,16207713740661968207,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:6732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=10532,i,1869110488653869355,12559027094999142467,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10164 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10844,i,12855471677307231717,7091705095112905604,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:6828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10800,i,334755313362494439,15128086809555698126,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8556 /prefetch:1
  2⤵
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10824,i,12388170113840302902,15875060440611779350,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9484 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10960,i,10362256468750543099,7604337568338560833,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9472 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=10996,i,1611205532122231075,11564869519319595248,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11052,i,16467644658507569500,1804664485100595839,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9456 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=11124,i,14607251354520137246,11942486822639657633,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:7124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10936,i,8832258327708993008,13580100986886823213,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9464 /prefetch:1
  2⤵
  PID:7136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=11196,i,5901412118322862435,15809749464501957807,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9836 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=4104,i,8310942560053100503,6860680697957738854,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11060,i,7919032115252957243,10315685513447006717,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=11160,i,9153550066942678579,2113705790217840120,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9812 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11164,i,17754868450115327560,4137437194344715052,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9084 /prefetch:12
  2⤵
  PID:7104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11360,i,16785943315592537832,8666973854896589250,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=11228,i,1707433222463332973,15438638713604711381,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9864 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11080,i,14412552388096848433,13062910597579241630,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9192 /prefetch:1
  2⤵
  PID:7132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=11348,i,16201545270921632470,7375745765699709003,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=11268,i,16206695528540070377,12494089642103028088,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9816 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11392,i,17348441569143583013,6304501646863087624,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=11328,i,6514770216004013842,5384814765762709474,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=2076,i,4735162344226491165,14531306268249541428,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9788 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=13092,i,4257216433980758803,5204969885675340721,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=13740 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=13532,i,16392608563651377510,10893996857688483783,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=13828 /prefetch:1
  2⤵
  PID:7888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9880,i,10838141975242109034,18081418088365589971,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=14140 /prefetch:1
  2⤵
  PID:8404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=13804,i,4444710628908761631,6025950209869791743,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9908 /prefetch:1
  2⤵
  PID:8472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=13120,i,10536540191372848218,14778654221559605734,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9920 /prefetch:1
  2⤵
  PID:8580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=13124,i,13510657414848697350,15511439452506783789,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=13940 /prefetch:1
  2⤵
  PID:8616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=12480,i,18052663008841585504,142949409456514306,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=12116 /prefetch:1
  2⤵
  PID:8708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=14264,i,12835914748995063571,9338798682880124188,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=14280 /prefetch:1
  2⤵
  PID:8724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=14740,i,255069896809439625,791415404659063078,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=13548 /prefetch:1
  2⤵
  PID:8296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=6904,i,1291998578617535202,308950140214108628,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9188 /prefetch:1
  2⤵
  PID:9140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14920,i,9102472902003319841,8671322359018655027,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8960 /prefetch:14
  2⤵
  PID:8200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=15324,i,14764477305575519710,11231098029642339214,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7984 /prefetch:1
  2⤵
  PID:9132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=14136,i,7025854744562974670,3538141265219581402,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10928 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=13116,i,16102406443316821819,3976386488179503887,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=14792 /prefetch:1
  2⤵
  PID:8072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=14876,i,16132345359116196345,15275992859167388594,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8944 /prefetch:1
  2⤵
  PID:9096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=13092,i,1611841323770070120,17976014696429811671,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1
  2⤵
  PID:7856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=7648,i,13240198189490784071,3187027044461501611,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9092 /prefetch:1
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=7636,i,10706135482925384183,10707143018235115956,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=11676,i,585122003366486040,13389451170515456041,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=14112 /prefetch:1
  2⤵
  PID:8116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=11716,i,2935673735230240246,7262194965427125641,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9408 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=7172,i,15508122876972220202,5243089485785415828,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9764 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=12344,i,3902137069751165722,7447373029571088197,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15036 /prefetch:1
  2⤵
  PID:588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=9756,i,14845408088594589701,2135200391555036324,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=13556 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12272,i,3783440080922031614,4749771012878808314,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15372 /prefetch:14
  2⤵
  PID:8280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12272,i,3783440080922031614,4749771012878808314,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15372 /prefetch:14
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=11976,i,1530757905560726330,438327870341633690,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10864 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12000,i,16360723336772420188,10093207588255317851,524288 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9612 /prefetch:14
  2⤵
  - Modifies registry class
  PID:8904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=3208,i,12830696861670003861,7980834931026148416,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
  2⤵
  PID:8600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=13952,i,442314951963657322,2982448937842102412,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10380 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=15408,i,5703046545844004347,844145580079587079,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=9608 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=6616,i,10806553616589458189,12192162304697890710,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=14072 /prefetch:1
  2⤵
  PID:6288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=8036,i,9859393065780653461,11170582068915951282,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=10696,i,8759835107618176653,4443006813944379952,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=10680 /prefetch:1
  2⤵
  PID:7648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=15372,i,8509050034749315153,7395470647007192502,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=13788,i,15249940991871850688,2021497116020518085,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:9080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=15008,i,16743171247212276949,4212642647313104144,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=12340,i,10598857232380602347,16021490732514819787,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=15072,i,10905205163715034773,7304001733986194039,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15944 /prefetch:1
  2⤵
  PID:7688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=16096,i,7870713941151091713,11085877819314552093,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15952 /prefetch:1
  2⤵
  PID:9124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=15504,i,9641695232442910498,6641131658126164662,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=12260 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=12340,i,10178196338117642807,16950750584493259474,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15064 /prefetch:1
  2⤵
  PID:8956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=9760,i,657572303046201496,10417140311540062478,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=16036 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=16132,i,9660080103308504521,1780014827642000095,262144 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15520 /prefetch:10
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=16220,i,477335052950376667,8722039854077657188,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=15000 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=16344,i,14557256020388905175,17790983017021669729,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=16224 /prefetch:1
  2⤵
  PID:9280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=13788,i,14773221628701321656,11409889582303873520,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=13884 /prefetch:1
  2⤵
  PID:9304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=13456,i,13075182969985554580,17829632688553701766,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=13888 /prefetch:1
  2⤵
  PID:9312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=13756,i,5568274391821666884,5359462502641213299,2097152 --field-trial-handle=2376,i,1726523930183367700,12554130611427264052,262144 --variations-seed-version --mojo-platform-channel-handle=16588 /prefetch:1
  2⤵
  PID:9324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e151fe259fa3166be22696f9c418123bb55ad288a46450684e09f7d83fb8436
MD5 eb7999e4087e764761eef4628a0482ba
SHA1 1ed5596c62ee62c973a396ddbe1db92996bd79bc
SHA512 02333ff884257bcd8d07a3faf78a47714ec3d6c1b58f233989d8d7e36be949804ebd2c49c4391adcf02e230d7f737fccaab85038de551cb15ea89fcc30e0ac51
TLSH
T1D8D023753E3979D1D12430B5A4204311B73758A33756D2477154480D9C344D197C6BE6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

95f0be32-1950-47bb-b1b4-3094b388b8a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95f0be32-1950-47bb-b1b4-3094b388b8a9.tmp
Size 13KB
SHA256 fc4d2c41309062ccbb7a7348e52944a7a8e1371bfdae5a4e9c8684c139f90ec2
MD5 7c36c1a7633eac95d1498ce29d6cd16f
SHA1 45c11bc9d5ba4b616e3e8629a692219885d20d48
SHA512 10d146d22171f598075cbdc0642250aa43ab3fe1979e24eef5d415564efa38a46a9fce3322276f912f69cce47327addfecb86380adfdeec3408bc43f21dbbd4a
SSDEEP 192:sxRnRiyM/jK1Ml8wFl/f6sTCzSNkUeEzoA8p44/g6+WNIYZjqGhIgIJ:sxRnobl/f6sTCzS7Wl/5Iqs
TLSH
T1AA52D7166A389977CCDBD209FA517F53D6F81573E2940E44AAFCCA0C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000ca

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
Size 25KB
SHA256 a1ff7b3cf1549f9152aee9bf7d475ec69f4a5d844c4054fa53a68102c758100f
MD5 91f7ad7162e8018b0cf239c70735d664
SHA1 6b49dd2abdeab38b0ad60aec1609a7a368b7be43
SHA512 a858860bdf4113877a15f48abb1f831c4a73897ebc64326ad6675010b090716f4a79cce8d419292d39680f0b0664621c4853a07f798d14a2bfc12048f4894fb5
SSDEEP 384:yHMiCkz2YJJ8mfmVjCAqZEXoCRf9oVY8NeVUX/RjLQRmXXh1skqfn6fItqy1Yeih:Nw2q8mfmd0B4j8sC/RjLsmXrcZih
TLSH
T1D2C2E1A45A37490CF0602FB45A1D89FE80E3EB503FF142A1E6B4ED2DC671E30B4D9A24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
Size 27KB
SHA256 8073ff708bc0b02ec62325fcc119b7cc6ee9df9a47627167da0d48128781891c
MD5 c0d25ced7cb5dcf4410e6968f7f7848c
SHA1 588e199ef0f9c1ce54702140ea9c978bdbebc43c
SHA512 6861efb3cc71247e94325c9ae0d0c7293c87292ddf59962701889e83eccf555713779f59800f681d885a8dd04fb4a67b53457457230f423c9e97f36241b24c52
SSDEEP 768:LzrKoUrDcA2ity/zh78YR/DJNwuF9bzy92Qgwxz/l:LfKXfcI4rCYlQujbsgG/l
TLSH
T11BC2E1ED24886953CEAD519C3F4DBCD32F71DC2836419D4A96AD771B03BACCC91491E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
Size 54KB
SHA256 767f1518a14e2e708fc7d50d3e1076c3ff0b7415f7a0cf37d4b06ed70abe83a3
MD5 af88a0d5bf2fe358add9696b9dea174c
SHA1 ea82da4c4fb6f8f79dd05080213930e2cd6c385a
SHA512 1dc0d91ceeb1ff4816fe23aa2e7452a72f0df35665bf79353fc4769b1f4b2e63cfa471c83f098eb174481df3a50693b72701df6b82c58b849954fb4e39ef3159
SSDEEP 1536:Ugo5gasEst/NxTMUfueFR22h8t98X+2ULlG6vjT2:UbZRO/TIUfueFY2U98O2KBW
TLSH
T1734302E3F4563DA9C5A7C4B5D54477B4C4301ACA82C5CC3A88C6A267E0F218E678F15F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
Size 20KB
SHA256 ba98e45878cb5b48b79a6b466daeec3c667e703d4e5236893b5af18a907e3013
MD5 f26b14d0fcf4416e0a45228bf1a0368b
SHA1 00075ba05087378643815c3185848ec8bdc775ad
SHA512 0d2d50eb4f29f482350aba7658be95c31d38821212039be2897263030b13f60a922942eab99d38810b780b76308988698ea0ff6db2ca0a074b8bee0875ed9396
SSDEEP 384:zmHEzulBbiTb1hIgZ7YeF70BE8GTyfhL32t0RC4bl6Kah6z:eUeZi3fIGYe10cShGYz56Kaha
TLSH
T18B92D08CDA7A0E5CA84D34E4497369E66B0C95680E76F6485DCB0C78A68FDCC25F10BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
Size 48KB
SHA256 58542711acbce8c8e5023990a42b16d5ffb020e15c947274f096ec2f5dfd120f
MD5 2d39b36966d75db96efd235a9138c744
SHA1 e973e91f7859daa07ba004d0a6b05f6d5b4a5411
SHA512 7f2af9e1a574601840e8058b26721dedef3f91b5e62e60f160b759ed3edc9dd2bcc6f5c342063076d27b70b64d8cd3f7bc27751e9d4ef2188c5e924dd1e8587e
SSDEEP 1536:lMywvUfiACU8FC+lJ9siLM7FDaPeMK9trv:iJsft2n+iLMJgKTv
TLSH
T1763302D7FEFC8D9886020DC5DD3F115567521F6844CAA2A0597E3BA68EFB400C6E81E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 32KB
SHA256 862b40952004f0e6f33b91a3807ab5db5d6fdc3951ff08abbb0db11ff78a7ad5
MD5 28a281e174cfad0c8d68aa1d1e249be4
SHA1 2068b41c6609ee3b599677a6aa14d16930103df3
SHA512 01424d7e1f32e9ebcf48b18535012aec117417fc47e8bdced5256a62bf021137d68f4451d422c062b1a3697e3608699472329755d91d095220e82f9b4591f93d
SSDEEP 768:Kb8JyyEwwoINw+2O9aI8mYqVNdQv783+42SHM2v6Xh1U:KgjEa67oI8JqVQ783+DSL6R1U
TLSH
T11AE2E1BFEFC63687A2F659344F559CF046466E49D21EF28807A0925B93272CB28E1077
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
Size 20KB
SHA256 652c695904bc7f0427931acd1988b101a27a14abebea2ad7b57c2fd725529435
MD5 22929c3aa6317203705c12f30d4fc0c8
SHA1 69997309d8f96560b6de50883a02fef551e413f7
SHA512 d2df1e2f8e0ff994f4a47e27585289edd531d66498cd72b85793a63b66291244aa687713f1bb062721f9350d20120afcec5da536cf0c6278ce930c7079523e5a
SSDEEP 384:ZosNmz8MkZcW4E590LG0jJjk/U0sVfra1yEdq997Hvj:Zo+mYMFELjCJjTZrandQ9v
TLSH
T134A2E1E8945EAAFBC28AF4433C5B691588E5C9F01D37097BC9EB34485CEC691B29850E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
Size 55KB
SHA256 79a48048286e411089ea66a64d40cf80f3b526d1af6a1912ca2f41fe7e88f04d
MD5 1d234dafac767ecb15e24998cf849ef0
SHA1 727da60a40394427be7cb32a0add7b8569de35cb
SHA512 eb923e0897542c06fe3bfa00b2f1750016bde4da653c89e43861056bcdd1744b1d88628d89aa5fe06146e258ece6adbd03940ddb8c24f22c35db1f742ae372fd
SSDEEP 1536:z9VYCwOhqk1eLZXoPKCTtjqaZ8g9kWKpopW:UC1Y4PBtuat7pW
TLSH
T1EA43F2CE4EF4E26C0D469714006FFDEC21FB2921A5609FAF440C395E1A69B1C8E697D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
Size 37KB
SHA256 410336f495b4a2b5683b12f871f6d2c09bb4410366895563d89dec6c3866b422
MD5 66f44c31456e8ac25c11464a74d3a209
SHA1 9ed5c90b12d43a11942d4824e247803bfba9997b
SHA512 09de4f2fc19fdd6f504b809958e4d906ff5e2cb2524eb7f225e97274608e9e707390ae8c97f93237761d013f3d42089d8bf3656df28a73edbc3dad68f14fce4d
SSDEEP 768:2pz6MHep8M2g9+Ir22u+CupVZWOBUT3m+C2128ft44NCN7hMnES9yL6:2D+p8MZ+v2CgjyTh1N3CdWES9yL6
TLSH
T19B03F1E951666F4D3093612906B4AE179B1620D70FA2D2E9FF20223FE8F450ED3125BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dd
Size 22KB
SHA256 690711e25502610bc9f027665e65cdf3ff375c4de2f31461d870bf120f330bef
MD5 2c8cdf64fe7367320e00e59e4647a1db
SHA1 f0cb7cb0c1841ce072cf5dbfb0dd707763a42df3
SHA512 14e863030dda308c64f834145df47b407d9f27e498186365fbdb7770a8f0e9e706ca63463a43a9614c04da53325c925135cca260a45bece7e9af867080d038e8
SSDEEP 384:aD2DrQV2olvw2uDNlTkTpum8qykYHkFU0+Ac2N+ulfU+W:aDeo2KY2uDNkyEFU0+AE87W
TLSH
T172A2D0E085847A6FB0158BACACCB60DB7B0F402A3AB5C4A3DDCE5C58C194B395957F91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000de

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000de
Size 23KB
SHA256 2f39fefbe005ddafe1b900e600f79bb761708fb0e5ce9e372c3d2cc7377f5e9f
MD5 b80bdf02b423b1fcd5362eeffabeb780
SHA1 149c96cac666df70eb94fb52c766375fedd2b4ed
SHA512 4381cf3c6718a5baf3828223ebbecadcdd0b0ed224cda6dde72c19419d8645fe4294005a650a975db2a25ca63380d69bdc9b6bc87ce78705a3e2d0b2eed7eea3
SSDEEP 384:hTH/+N9BmhIF8inzYiW5GA5af+p/Uaw2TjvpDhizd9feuS984TixounuqWjeJ6M4:BH2N9Bwa8K5Wnp8bSvpEzDfS9RYJPfsP
TLSH
T184B2D05543E48F4B702F4E15DC8B07999131B17BC3B0340CDC4A27A36A6AE765AA3A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000df

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
Size 53KB
SHA256 49ab4b3b4c2d7259293a9160b0df07512177794633f9505356442ee9d8d7e688
MD5 e4aaf4a5526eb296de4e0e8b159d6e09
SHA1 60b1635eb6c0f1b93d1f00b6dd1933726af1d02d
SHA512 1eadf1a92ea86bd741902c6d417b72f34a6f3b802aadf6eafd9c7317ca9d32637cf8b7f008872dcf671ee295c381f1398625c21c268e188ed52dff0f5c4b9410
SSDEEP 1536:Ob49PgVaDLQBxfLAWQilibditGKcNJQFsCzAuqw:OUYVCLQffdtCNJQ7UuX
TLSH
T1EC330234F7F9AE3ED2589356825BF07B60E47D180789088B5C905905DEA43B6D31B3FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
Size 55KB
SHA256 9b6de8e1ef10b0956670765b7c50e483628ad4c5d70c6d893e8a02ec79a3081b
MD5 4dbf27800a9138f095150a0018ce3eef
SHA1 a30d5f17eb65b19a0601b8e98d5b020f43d1d7e6
SHA512 49d807e3d69350b67c16c2a12edaa1c845c0a78932f3ca60f157d041182bff006ce3b95848482a5a2014dcafccb424413c1fdcc02b6c61581f520e1eca879dbc
SSDEEP 1536:qEfIorwUNrN6pnlo0jKzpd80mlqUm0a0pRM4cSOC:qEfKMr8rAr80mlqIaV8
TLSH
T13743020B6DC0D57DEC8ED33C0C06367D9F165CABBBFB008E9A2941C962161998D7F2A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
Size 188KB
SHA256 87b691e9630b8676e8cf7186a12a17ed81a6c6625cd935680bc6aa01344285e5
MD5 f4a25f8d04c2b3331ea86b2a1786b68f
SHA1 9fd4f9fea2741c0e132a727d7d7b1d27a14a1ea2
SHA512 4a9c9790c8af3f1d041d51725044d50cdd3d2db8caa075b5040171e3d5b58a785d201c4a88bb03ca82fa3bdd6f687e261e925f7840a3e31e2d34025441138b7f
SSDEEP 3072:HqLfKv3qMrzNO+lWI8EYFnuShN6EMaeojL2BlRqJ/RapPYMQjSc0h:ASvRrhJWI8EYdlhhMdojL2LhYMnr
TLSH
T1881423A5FA7AA576D37FDD014FF89E006B84C344D3A5B83C8F5A390B096925DB1304E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
Size 158KB
SHA256 e1eb30a66b7e2b803035fd12f0bdb219e5754779ad4c73d2a9d2f4859ffe763b
MD5 7797b39dfa991b70bc3fa67ed96b4272
SHA1 13dbea06b1255e9affe342c4a18adf8dfc9184d7
SHA512 05fbe219affc903dfb5bb1193c3bfdfa06c708c4a55fe92894f9daddcab001b6961b9778f4c7d1b2998f7f16dab4822c454e25ef567efaf124d792efbd12ea25
SSDEEP 3072:Q++uJyDaxCTKyae4Eju2GaMSe0S4GBuBvD3X6ZTBhR3ixrIc0IcI5XoBs3z:PQDNAe48u1aMSeyp1jXgTBSxrIUTtgsD
TLSH
T17FF323A02FF5BA823D11C9A932F655A8AB0A21F9177FD7354FA490770274126BBCC34D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e3
Size 23KB
SHA256 dd05e326cf8eac3b55acecf29c842ed73e6e6dd06491cf47f7e8800680ab3e33
MD5 f837d382a885a07c34a3d4bf4f49373d
SHA1 68ddceef1d164a48d9d01d4a74f26b7897323229
SHA512 ef010d89971c4f69af7bf541430364c56245a5b63ed730fe628e49f48fa9e201c7f42b1e104eb14c3193bf79dd7ce20244f6b963e9996eb8308c0d61f444ece6
SSDEEP 384:rfabeuzsqm+MAlOitodpHq9WS5TO+cig4RKuIc7OhiVaCcHKLgFT1GS:rfEeuzM+MFSoHqgS5TOjr+QTUVPuSQ5X
TLSH
T185B2E177A100A48EC93CC9EC53B1EA7B736F7941F02E5FAD41FA50361C7E580A19A0A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
Size 23KB
SHA256 aac638f7503cebb084ec494cf00f75f7d8260d50c2f4e7820bccabba09626a3a
MD5 3714175d15f37e385c0d80f1c8f4fb42
SHA1 51e26e670e609c5940946aa0e750529a86648f5a
SHA512 2330466d763875da4362098860689b77192eaaf805b06b6af90c9bfe9fd9c4ba0b39fff32b20809f773defce1cb2beb00972bc66dcfc395690c08d7004def865
SSDEEP 384:ho14eajAfZxGlbbY6d7ftVKsMaPNSCPWE/8q+kDgQWazNpm2F3g6iqL8xzqiKfv1:muJcfZxGFU6d7f79M8NjP/8q+kXzNpmi
TLSH
T136B2D0AAF6248F8FD61242FD16459DF335418DB98E2BB45284C2F85D3F4A03A64F05BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e5
Size 23KB
SHA256 e50bbfa9012881b4393ab4989a200e78647ee3ae3c0d1ff4bb0f80e6b4bb7bd0
MD5 43881a474ab80ea6f793db5211d28cf1
SHA1 36b1c5e033d7a5ca884eba834aeef209702c7362
SHA512 87fa402d97283dcf26506f0e02ebbacf225e4f830fc8400707e8a813f6b75b9da724d91ed6a156378c810a162cc1d9694a1a4203b6bee087f3a65fb307e02433
SSDEEP 384:MxGjFubchT1de1/bMXB6hBjrz2u2OdMgqX8NuRjUHOAjIiCMA9CXrHaLh2DyE2Hf:gGBme1dyDMR67fzP2OluRjUsiJR2h2DQ
TLSH
T187B2E154FA325C42E67417E34BA5D7CB5AEC8C3166A26E00BA2F003CBF219F04B64E57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
Size 316KB
SHA256 5ae3965ae20c8090af12aeafec6882ef41829397f28f554e89fbabdf9069ea7e
MD5 3a56dbb96ab7c12545cde2b328e8d6b0
SHA1 7d05d6fc506d0c4acf3b46bbf3b3f2b697cffa7d
SHA512 656f1ff17bccd0f616d3b618fff8b364798cf852521aec76c20ffbb28ffe7ed32e2209c60a51e99d1eaa91ce8e285c48ae1609b9d313eef54e5a47f89f2a180b
SSDEEP 6144:b0qqHV/dGkUb1Lij5nzfoFaF9iCsaadxvlBYidKu8eAIiIlQwfffffNQG62f:bm78b1ijR22WvAfvwfffffyC
TLSH
T1716491D9FDFD9D27B3882DF4CC28619B00F27724E86575426C8ACA06CABDC905A56E31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
Size 24KB
SHA256 257f1295e8554fa74dede6c9a5724d683d6514dd5dfa7daf7c6748e7a0ea0770
MD5 c312a3c86117f6f515d213cbb6d5cf6c
SHA1 5e7d2471a49e695969a4486380b826f85d9e46d7
SHA512 cc8070d60ffdb0f0c9663ac7dbdceef7fe34269ecc204d04db39fd24b7076c4dbeb0bab6f2347996b562cbc219e31a44ed8270f6338eda22cbf7e88ea10e793e
SSDEEP 384:EWT8ZTe1HVS52LB2kYc/xXsxapXYPc4hq78u7qqa4AcmClUJnLdyOk529dwBJONt:HATeK5yyxapMmBa4rXS+29iBJTActi
TLSH
T133B2D13F9C3CB5ADC267917A226016634BF6F416871F121864399A19191CCA3B7FCBE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 32KB
SHA256 a398384fdb96b4c9c798196d2b29c9e9526bc1e6d26156e094a1e56bccecd738
MD5 b2133b888f142cb42a231fb760c966c5
SHA1 5e37d2c9b8c6e4fa5e6ba74f36a3eaabdf8f62a0
SHA512 99369ee95dc2535cee76e91ad7d254c4d009737524bf27bccd14903b4de3e652a339291593359eb515d5f84d781b3a5c62c66361894ddd01712d6a7ec3156e2a
SSDEEP 768:neh4O0XiW9EjMtiYGenE33SxpTCzm9IxPectoVlMd:eh4OYE4ti133Rmctgc
TLSH
T185E20226F92226C3F6004DEB29463EC66D2332DB08571FA450DDC85A56C655C36BE3E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 105KB
SHA256 47d33ecd7ad757cb2440292e7069d9e8723e6444fa2aae2fe035a049dbb434fb
MD5 c86830c4025af96b530dc7b78af37047
SHA1 b4f3d9cf50d1a77d5d702eee14026f8a8a7c9904
SHA512 a903be84a143c18434bfc07944ab8c2a73cda270440676b907e4364bac026a5c72a9f09514ebfd4b5244ac4ff866c7497f23417d6a0357370bef93ebab4dc4d8
SSDEEP 1536:15S0mk2u34nZjatMe4t5L53DRh5EKJHmrnoCUWhnXVDvBA5Q:15LxS4MRj/EuHoIynXVDvBA5Q
TLSH
T19DB312F52955A97836A777139311C7AC033988AF61C2A38E058F51A1BFB93C3C273567
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000eb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
Size 23KB
SHA256 b0e7558f4710a1e255b93e3deefe3aebb19f3bb41c150f685a74d3b1a1c79e87
MD5 42b95430773b4a1dedfcfda8c03a1d4b
SHA1 8581face3a3703b4807aa2440e5354ea55a6c4ee
SHA512 590e1e4dca67cb9088844530eff20725270421a6c521fc05cf09948df81ab6dbb0a169f42b58b031ad888f0e7ed863a0221b9243bf2b502e805b82ddccee9573
SSDEEP 384:dg3hlifU7dYMasNHvcIxoRqrYcyKRjpt2PJKYytsPLFOYYmHRlkaSsD:YqsdxxhcIxo8rPyKJpt6nyaPwtOR2aVD
TLSH
T1D0B2F1B040941B85F59BB8FC7AEEBFC2681F95BA2EB5A9363C310D4175617C3E521031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ec

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ec
Size 147KB
SHA256 18e5d10dcbef3104611db527fc8e3e8e0788d304300c53dfba9953acc93a6c13
MD5 cbba5d5ff208c6234cb4e0444cb745c4
SHA1 2a1a5b5a054bb62260201f38ed227f907f5645bb
SHA512 fde4875ff5eceff5c7d663dac2bba0dbdea1f1ea8b00879002b5c76712d8bb0d8f5011124a002e5d748cec46cbf86067df347c8c828aa591a5725682e8310866
SSDEEP 3072:NELykVnHY8J98vPZc8eEJr+m6HH/yd5TD/0MUoo9Qd85Gg8RVoZQNTU9:unFv8vu8OfE5ToMeQK5h8roiNT4
TLSH
T1E2E313BB0372F94D7A599130FA86C9670D08FE28E7520EDB1BF3C7319DE51288693816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ee

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
Size 141KB
SHA256 edd6f38cfad790bb208983c6188158c370aed9f2b43d1fb4aebd577dd5b9735a
MD5 2ff5e51ebc4696d52e563716bf4404db
SHA1 c0894e8af1d8aa81d0d9b26e0efeb98940abbfb3
SHA512 3c96d0be8fcee424f0f9000bed6afbaf5c4f4dcd12dca87a9f06366d2cc2ef8d82b29ce2d1b5b9b42a571532ca37ad1e2ea42c38cb9d8c9cbd06ae04b75f9db9
SSDEEP 3072:Qgut4JQ5uuEhS5JgT/BXNhpL8wgnkYhFDmyn30364clUpkfZvjT5A4YYUdpx:duCQ5tSS5qxNSHa03e1kfZv3dPUHx
TLSH
T1EAE323A0C65EC246EDC194F4E11688D0BCA031834DF2F3EDACEA6D075AB57A9D712D1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ef

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ef
Size 97KB
SHA256 fb67666c4f3186f7f02b891f91d561c047e8b78e48f7e210857a1b6ae53b3043
MD5 09ecd95aab161388730c8d2add95e3c0
SHA1 dc94e9c9a18b65313922e4c6f843c9076628ea1c
SHA512 1e5e823bebacb4d70ab5886dc079a61b733bb001d3744db13610deb56cf20a253c786b85f9190c495c06fac417cb1ded4c81542c2082d2700b23c8556dce4c0c
SSDEEP 3072:aFG8u3x+gqXrquDy2n704tg5wV5Jrv0Hz:ak8u3k1y270Ag5m5Jb0T
TLSH
T16CA3128FE5DEB43228959A8838FE35B84EFE387763B9591C1474B09AEF21E517481CC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f1
Size 143KB
SHA256 c6ae4786fa120b55a080e6734fbe155bacf862c76cf1c0d7f7e32426a7f8f622
MD5 b50caf6d35f13505e0cab4977b2945a7
SHA1 70110b108e704ba506e370a3ead976c1bf580e00
SHA512 44e639bf07f5f44db8e8544f019a8fcc38f36ebf11ade7d6ebab85f956c49920c1b7789af9c7860ef3442a7a0f2a69a0d0eec321728b1d8c144d62dce58f9273
SSDEEP 3072:0890Sx1lU7yiOzCmcKnIq3oZS9xc6P1LiVX+yFiBkxZCqIUknSSc:08iKlIyiKcgB3oZ2xiVOyFiqaqIpSSc
TLSH
T134E32376D8DA4CFE1E55E69A1C1C2E02FCAF00D463B56DBED013CC91AB295D4BE84622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f3
Size 274KB
SHA256 ba321fc3c2d5fd68df6d9bd0b1d4dfb9e06c3f94c076ee66ac5609f94c56a9f5
MD5 13707769ecabdb8d45438bb49efdbbb1
SHA1 95b70fe93e22a9a8358137cdc3a055305fbbe005
SHA512 33be56496be7bb0aa55391ef1a4bacf6eb8761cfcaf5574f8a9b5a4c674d9d7bbc9047147e375c3596bd14855d19d1dbe2bd82f588f3857e77da5175f2e5dbc5
SSDEEP 6144:qsDitVvashD14qeFDLyurPORIdpUlZQPRJbhkgPKTa:qsyPhDb8LrPMZQbh6Ta
TLSH
T12C542376A5396F75CC40188802A53A5D634360E2B223AC56B847ACD0F6FB967B1DB9F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
Size 20KB
SHA256 2fc77b4a0620f5dca2d3cae6d917af3acdeb3b2e5558ba1727f8d651351fc692
MD5 4c322ac3533ac9b7077632040490c691
SHA1 24ca0ed0e641e75cbff9ef84a93bca9116ad2249
SHA512 78543d32bb0fa6cabd9b0497256b73f68076ffcfde470746a500c7c5ddf9af9446ca247e9fdee4b2a4f915da36c49679bee827852411ebb16512685b3a710963
SSDEEP 384:hbq1xpEkBqusIx8/AlCRykiyVxg+6YFgJ912gX0u2iP1H6+7xeHUAui41jH:tqPe3hIx86nkiyV8Y6J9H6iBbiUc41b
TLSH
T1B392C08BE5E2A3560F0AF01CF78E75232AC9A6EE3171C3FAACE14D6519781F51D106A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
Size 256KB
SHA256 8dc8d118431ecd53295e1fae0f7667a140891ca1c3ee6abd82d6a61c37d3aa39
MD5 bcfc5b9ca3de6632d837632c89a07ed1
SHA1 826230dc10bf29e0771712392e0558e38ee5462d
SHA512 888252c4af37c54f9eaaedd30616e8c87d6ac4a7885566b8b6fe13094583bfea4133e15252bd81b731ce21827988aded7a748fe850366dd2703df6d53c4a88e5
SSDEEP 6144:b0FwoAFtUAjc0Ju7IudL5F3rGNRTge2lPYm4oG6Ggb0ep1T:b0CH8n5hwglP2o71T
TLSH
T1F544239A6CA179B47E808249B836DDD3045F68DCDB306ACED67930A21ED39E34D770D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f7
Size 21KB
SHA256 f66b1ac4e9b68a5624590501018b89f6f8c6a80168a7e6ea3937b00486e59e5e
MD5 39261b99cf315a23472b1cfae2091e8d
SHA1 bd5aad6991a5f1ebb3e1fec06bcc2279fb1e6951
SHA512 ee6bff6697eef6e6f2f4ec8005e6593a8f60e3bb5cc76733e6654883c3d5d38e5d7b4b698a36c71a6cd6bf02f233fa8e970e6fea060b79570b03f0d2bdb3bbf2
SSDEEP 384:NNCDGoDQsoCEF/fqGk/gxmy95egF0WCk4mCI+4J4qbW0IVhVMtNpML:NMDGpsZEVzZ93gm/+kzK0IVhStNpM
TLSH
T194A2E1BB72765EC624477B243D0086E2E7FDD36182A45B1CF6069CB81B2375F908866F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ff

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ff
Size 59KB
SHA256 1b7e8a5bfeac7825cf442925c9e75ed38f65be1024c4764454f6eab0dfb9d4c5
MD5 ba853d025f1d86fd71196186984e50c8
SHA1 bfa1b79a865b5bfd119f536639b48781a5b4ef22
SHA512 12e66f23a86f04240023833d943469f124062dd83c43c5699f3a147a667ad37c80c4f79386c9441e84358cf1172871710aced24f747c5e8382335732a3de745e
SSDEEP 1536:hMVWXNx8/RfAZhyb3uao0HoO6OmY53mgBSe/x1CWAuu73:YYx8ZfRb3uaHHoOlcgZC53
TLSH
T157530244E7BCCCBAA9D48AC05BDDB6717391620F219231997F644D1FE28D60A3C8B25F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000102

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
Size 18KB
SHA256 14e61cb344ede086213db4f264072f1372f2dba26dfffd6e36df9d815035cd7d
MD5 6f96022cccb0753e4ec5cb45ec4f1f06
SHA1 8bc42c6043e4bd4771a5506ba0e44d1693da4202
SHA512 aa979253eabac271f6d0129f394b28f9f6e14c3512bc1abeebf0e37dd7c920f5b14b58ca734ed66d5b62ddf33dac369eadcb0593d90be2aaeedb3ed350b4042f
SSDEEP 384:LcN2za9w1AC0VNm8DwpQ73pBIQTXqbX7Kr5yiBD/CVGbnkt:aHDVnDz7pBRTqr7u5yiCVGDkt
TLSH
T11282D1FE91FE0F617C9B703BE04DA02C4601715BA978365E33B2ED086B25DBA5126E4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000108

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000108
Size 17KB
SHA256 dc206ddbd9521209fea2e2fa17f4daef750c1b4512c410d9c63bd7e985316d31
MD5 0cfaf587cc7ff7759115c15360b1d50a
SHA1 ea146a325be874e201e65e528b0a04f203977859
SHA512 4b0958bfd46378ae2626fb6d69192d61d1e3503145b903d4a5119fd944435c09f11652f4ca85f29a4c7f765ac08d31dcf10ff09b79168738b78af510208999d1
SSDEEP 384:YldoTGwoRlZlPfcRBcrkA0udczyi6v6LBkOAmIPgMH47ZUxq+Zj:+deGwk7ERBcrN9016CLSOAm5MY7ZUo+h
TLSH
T1C682C0266B1813CC87456250BABFFAF178F4AD7526092A59C875C56F7C3F0C7C2CA054
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000109

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
Size 48KB
SHA256 0460c4843976b65912bd6d64f00ed6817dcba7647c4defc8a77c6221e025784e
MD5 3364c9b0c1de30bea39bb360220e5e8f
SHA1 41acf2eaeebf312a597cb96752ef68fa655c4e3a
SHA512 40a5c33f0f9529426228a2ffd81179e1b67d157a39b71593f16fb0e6e7b5e34ea25a5bd6b45fa88e0937539f73ffa6e12d151997cbb567f86fc3c78d0f94563e
SSDEEP 1536:o9Rr8Vcf2KtmWw7t9neOa96XXYDOWu1Qr:oD0cf2KgJtxfa9eYiC
TLSH
T1B823F10FAD092A18F9334EECC34962254D1A540DB2FAD2A3CB6DED83B5A5FCE056171C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010b
Size 29KB
SHA256 475f3b4db5577dfbc7b73c9d18cb28c5d546ee27ff60ae055ec302df9254a9de
MD5 1d71f220f9c003ae4ba15be52e53d4eb
SHA1 f2bf7a2551010947ba696135901c9823e5936640
SHA512 431252e45c2f1f6b1488e32b22651a5a1049bf8fbd8ebf839b8e3535d60cadfeca9e055c4138e0457b9cf691d13ca4534ee5785845d8ea79a05ab769335abec8
SSDEEP 768:ptFt5xlKeeoGZt6j9mPn5i1NUGSgK9MlXOU:XFtXvvQvPGSgK9MBv
TLSH
T182D2F1162065D0299948B5E2E3B8162B3725FF3B1F0D3B52DF64A2137FA12C7914B396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
Size 98KB
SHA256 7ccbebdc7f265ad421ff937a883ac24eb09f1fe08701a83bf2a513d49524f78d
MD5 d2d4f014f3c6000886a2f07ee4571b22
SHA1 96de7bd0071fae9e72631d6aa21c1aa23ead4554
SHA512 ba5e466da6385b8a398bdb81c03d32ad910c3d91730eed9b90d5dcf2524665a40051d2f9b9c33b3499ed0a9616a8c2d330dbdbb24423db4cc5f384af0240ae41
SSDEEP 1536:Xz0AjCcWYN4L+zwS+3/xGw3wzk5WXK00kSC68xh7LX2zscVZNktt58FX6HwRiz:XXdGe+3j4k0VLf2zscVHCoFX60c
TLSH
T1F6A312B5932383E12D66930E9932158DC297EEC51EFF6CF31366969E3A340307F65062
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010e
Size 132KB
SHA256 3e77340420fa9b3566ca835002d1746255452e3ff4852ba4ea568123f5535188
MD5 391be4e8354db1e809577dca345eefcb
SHA1 9879f7b65baaac7e256a7cc5498db69a1475f050
SHA512 240bceaacd352baacd16e5bde383314c635a94d2ba0d096a76c405d16c9be45d7770c68d040a2101b28904d0aec480bd765434f263ad7041509349ec9c0ded02
SSDEEP 3072:337urP98cfC52aiDPdG8sVYVgHkinJivcFPNj0pM:33SrOcK52aud/zVgEoivKB
TLSH
T1A6D312FD78CBF184E158EA9BED85174845B9C7F1A4977958D2AD20F0B7E6000F81F026
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010f
Size 114KB
SHA256 19d410cf923f8bb4f081f400fcd0083a5edf8f380ff21a5c3a8d11051353dd6d
MD5 13aa516157d50e05b815d890cba600fa
SHA1 e5db9937574c4050d905b36dd4d8112c22ba83d9
SHA512 f1ae97c2917c7b27964ebab9530ba4918a02f5299c162d77ca92f51b76621ea074cbe41f4dd4f82508a0897761fdc8c0f7d3d442ec3ed62eeecab7e266649a01
SSDEEP 3072:25KTa8bNuyLN+/vDWcZjuAIUXgrnUZdU+heM9PoJW6A:gKm4NRADWcZjuAIsgDUTFp9wY6A
TLSH
T107B31234E536A50144055A8A84EDB97F16652BCFA0EA92C17E7B14BFF783270B7E01BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000110

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000110
Size 76KB
SHA256 9f589ae7aa3b9c5c8457c84743e9d4a7bd482ac7f067b8df15234fc0e7409368
MD5 ec0bc58cb58c590e9e25cbbbe0899172
SHA1 9626a678839a8c8bac041c105b2d572156b84797
SHA512 4018109f87eca1652f17c2245077022fe916da460b1e659617d9b6b5803108cc6699b65e0fe73e78f4866857aae6de64c9e0d4437a0a08c63b822dfabb897845
SSDEEP 1536:Nu5LAHQ6ewFy8TlLS19z4M8xZG5DPbNhxYE0gOUdLHJD7Q3LgU0:NILweX8TlLSXcP0DPbiE/ed0
TLSH
T1237312BAD2190026F92B91B86D573DB94A0E7C6F706AC6AF7384DDF4493250472A48F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011b
Size 23KB
SHA256 b330ae0a78f895524f6a90dabbba443be2ae1454caed08432101738b96262e8d
MD5 7a6c1a561689bd83c15f2117ed95e873
SHA1 7879321f5492a0e3176af82f2ce97e29f75dc8ea
SHA512 ca98b70750698bed583da3ea2a08fbc3ca5a3f3abaac03e6d4ee1f559fa31bf8d400213f0923b28a6f3103fff992f226d825993c2baebfff1a7ef414ab2ea347
SSDEEP 384:qERjFlvHdI1CsF/JviV0fJEr8TkNvSQF/jx1t+ZGIPYKdp65oU1SbR:qE3ZHdI1CwvXpkNDrl+ZdPfi5oBR
TLSH
T16AB2E1FE86F67F62E01E713168D54312B0179056732886CDAD2751B3DD6E4AC8DAC0BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 95f11efe089ee0b0e65b1e0a7ceddc63f902c7813516e83858b6767fd3f663be
MD5 1033be6d6c3ba800ea04fdd20e6d9d0a
SHA1 d64abf7a132426905183014adbf6591f57855a20
SHA512 a062c24e6c721db44af352ae0a3650f2bb85cf5eabed55de46d5a0bf9fa82bfe309153d9bdffd6653306ebeb3cef74808f5c712f29f9cd93cdf180f0cd471abd
TLSH
T13961F9185A3B8B2EDB5C2872E1E120FCF3F4E546275BFF35C5A290B269197748C30612
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59815b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59815b.TMP
Size 3KB
SHA256 f242a4641ef9660b9c1dbb7070046670924cabe20c4de936b46b580f01beb6c2
MD5 06ab6ac414cf787a6ec24f0b69af7436
SHA1 de4b2f44f513321279bc5526c3b7942cb07947e2
SHA512 3a55da743527682ddd5ab0c27032bef27445bf49e4b868464d7075fc4f2a627516deebfc9735d0f881354abf5a9eb8c04fa0181157b90d30c21876ba62a05379
TLSH
T11E61F9185A3B8B2EDB5C2472E5D120FCF3F0E555271BFF35C5A290B269197748C30612
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.aliexpress.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4349bda54b672d7d8e6472543277d744517081abe50e19730a60b6515134315c
MD5 4c9b2844c2b647772e22b2c0229f9c06
SHA1 8d2d68fa17151804b5909227111122c2f5ac90cf
SHA512 195e5489d3798e219403d394538c24460aa8b95164e59c6b5dc1d54f67fcd2eae3b487324ba2da1d2a16c7f166cb41ea36de13fb86977bf600e469aeabb2f13c
TLSH
T14811CCF3C2E8957D894142F87F146F1BCE2D0810832C3E5AC9E4AB5B83E2870E24084F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 26KB
SHA256 492a97c8c1a02a27543a266eaad92a4549be6edb1eb93c6a4284956b0a411bf6
MD5 88ca0ddfbd1dc9f5864b97e8cc2b20fa
SHA1 213808b15d8eb44de683b9b957b3a8c1ce227526
SHA512 35cc89d5a958dbcf9893a92dc63571f62260fe48f0bb80df3466f720ae0b8539cde067592200b8284295a7739cb58d7446d2c9e957b3758fb1614897005f4e70
SSDEEP 384:DIlQOIIn0sPaeVw8NEPQivU2SChWuZUnFcl8nTvPnCq9ZYW/WY6GGg95III/Tr2v:LPP9Kk41aW/GbPC
TLSH
T145C2A2F7C3E5862DD91256F5AA147E2BCE1D0925932C3D1AC9D4EF4BA3F2470E240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 19a8c83eb3a28c867711c4c47465b2de58fb60c00fcd1255903964791a275c6f
MD5 f8b78d19c5101dd2f7991498f7d6511b
SHA1 d36fc13b64df50bb0639b21bdf5d43ed3a1b7a97
SHA512 bbbcd2c11549e903bf23edfc2da4305585b202ec7b0c395d45073b170744360beb4ffd6df8beb17afc9c0b845e887f1781e21f43a01842016c4de18dce039de3
SSDEEP 192:sxRGRiyM/jK1Ml8wQl/f6sMjzSNkUoLEzoA8paesmUbv36icfW03blIP5vjNA9wg:sxRGoOl/f6sMjzS7oZu5F/5KEu
TLSH
T10082B647A9344E778DDAD219F651BB2BD6F81033E2A54D44AAFCCA0C00E7EED6102C5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 eed937382f769f87f0bc9869414b5135a326f93af922db2ffea3fc4a4e481d81
MD5 e97507ec0e51485142800d1fecb516e2
SHA1 03a1bb4f0ca14684487e3aea36132d088bbaca6e
SHA512 6df630ab9bd63eed599c040d4fc30031a7ffe7dab36085ca1b09add9082627919ffa3fcc02b1ba65a492d9ff6bd13c88525dcb5a26817170da1c9a91d5e7e9ed
SSDEEP 192:sxRGRiyM/jK1Ml8wel/f6sMjzSNkUrLEzoA8p6k1wwdbnb54fm6imJfiBl03blIf:sxRGoQl/f6sMjzS7rZj9t/MwEu
TLSH
T18E927383A5740EB74ADAD665B550FB2BE2E51073E2A14D94BAFCCA0C00D7EED7102C97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 4e6d497d349185e3cdabaf635d4db58f9eafa118d234951319af6e1bbb51bae8
MD5 7d4f573e72ff93a20a26eb32a62f0ffe
SHA1 beffcaf9564ae6e6b0f2a7c95d871b64f6ac9e50
SHA512 9b12ed083687e76ea8b064dd32571297047919429a827dfe6b62487b1c9ca6c5b39431634a151b6f8b42e63ea6235d623347b62094165217c10abe2242aaefe6
SSDEEP 192:sxRGRiyM/jK1Ml8wW1l/f6sMjzSNkU3LEzoA8psC1wwsuEUbzOm6imJfi603blIp:sxRGoI1l/f6sMjzS73ZXvw4/M9Eu
TLSH
T11C928683A9740EB74ADAD255B550F72BE6F51073E2A14D94BAFCCA0C00D7EED6102C9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 5b2def6bb6ac060c3baadd9df8530da7ca5b18726374e7308a0677bd9eb3349f
MD5 000b6944764fab6e0b237301bc22c67a
SHA1 9876a23305ee706e3d683c68f2c7bb73f99478a7
SHA512 c34860b760d046c6243a010affae964061d05c203543f3a1220f3e0b44426141d24fa3f95d2a20261a1a7576faf71afee06d68e3654d2d6a87470bde4ae353a0
SSDEEP 192:sxRGRiyM/jK1Ml8wSl/f6sMjzSNkUWzEzoA8p6k1wwdbnbL4fm6imJfHvBl03blx:sxRGoUl/f6sMjzS7WhjR//M8Eu
TLSH
T184A26387A5740EB78AEAD625B550F72BD2F55063E2A14D94BAFCCE0C00D7BED6102C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 11ddac4232d35b2a5ecc0f649646518a325a26136fa638fe9346a37d1bfe2c19
MD5 05a3407525455dc1180734586a4a90f3
SHA1 38f77ea6e3ab769ba73adf27ac8be558d221d8bf
SHA512 7e5705090f3e38da79ed0221c9eb1ecedde06650d8e2bcd1544045338e03a915e0b7818e52e292f7a87188f1a4e2137aa10ee6ac153b7361d8dd700f863fd1f6
SSDEEP 192:sxRGRiyM/jK1Ml8wFl/f6sMCzSNkUeEzoA8p44/g6+WNIYZjqGhIgDcJ:sxRGobl/f6sMCzS7Wl/5IqU
TLSH
T13C52D716AA385977CCDBD219FA517F53D6F81473E2941E44AAFCCA0C04E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 7a201088f3d3b6bef283848fe59ac258b443a3d5be13b76530a6c030fb310d9c
MD5 bd8fd94ec765bc6496db886f4ef6063f
SHA1 2924fd0312dfbeeef4a0c5c43f73afa61a9aac55
SHA512 13500d2f26dc0af501c543d98eb9f91e998eeff8ccac62f2b2c84720baa56ff614a20eb9160c8a04a6a80b3a00ac1373a73210660e500135ef68eca98b35075b
SSDEEP 192:sxRGRiyM/jK1Ml8w2l/f6sMjzSNkUW8EzoA8p6k1wwdbnbb05fm6imJfHzBl03bw:sxRGocl/f6sMjzS7Wcj8qX/MFmu
TLSH
T16CA27387A5740EB78AEAD625B550F72BD2F55063E2A14D94BAFCCE0C00D7BED6102C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 daff0b085152f80086b5f4ab3d260558593ee42c0c297ea81bff6c5e383b0029
MD5 fc6b448e31593c948737529b703ebb99
SHA1 8a5bccc55870091090b67f2433bfd0d0d39a57c0
SHA512 9517b2decbcc948cc8350c22f061f59d22b99796b0ec3bdd1b2b14b57e6f5deaa56e728a0ee4b938d18d3aed0ddf01b361a71d35ac8a6a88eb091294ed530567
SSDEEP 192:sxRGRiyM/jK1Ml8wAl/f6sMjzSNkUpLEzoA8psC1wwsbUbzxm6imJfiBl03blIPJ:sxRGo2l/f6sMjzS7pZzUe/MTEu
TLSH
T194927483A5740EB74ADAD665B550FB2BE2E51073E2A14D94BAFCCA0C00D7EED7102C97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c4fb7c2071f4c7776f72eb0e6268f2f687a546a704365b6b04f4002c01e573d4
MD5 d0c5411ef3090000a8b0523a108fca2c
SHA1 39db6fe889be92845d5204dfb064cc56f5fa25d6
SHA512 cfb3ec376dc88a3ab7d632b228b29f7f602e8c177d1d18eb6801a026723d0b09646a371161690171783de6f685190fc4016878c8b69929b161ddbcc1b9ca28f1
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQZro7ov8nnC:eOEt7IWgKgf16u1jaZ/QS88nC
TLSH
T1ECC20B2B240CC77E4F844E6DAC2A6E976DD801CB9B988D5447EE890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e0029bf9347cbb62532ab336f4d745ccbc36f92607a182303052bd9df9ed8e11
MD5 c35412854ec43220ad4b83c97bae56e0
SHA1 44de6e05ced83e9f3d9600cdd2fbf8887a1bca9e
SHA512 9a3e7f6bdd3874d87107e3b6c7758147b54a71cf4f7c18b334ebc5c18d91da5c18f3c2990eb9ec81e4cb9c48d6e93181368cd1ee3536bc87d5b672a1b09ec992
TLSH
T11BA0021906581087D51662F0AC51018C3A209DD50519126140AC9454A9A4740A23A05C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac8cf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ac8cf.TMP
Size 48B
SHA256 8e3afd7449f8bd299f88b7cd9777c1e6eb97e29974e8071b74b91162b270d7ae
MD5 f0c4b1c424e8148f0e89d59423d51ab5
SHA1 8f393e0dc886594805c00a6dd91d936aa266b8fe
SHA512 1937e49e52a4969a50c6a2733a03a4e6ae375ebac92b1cf90623c87f9fd628243c664f96addda0f120a473496f8e41ed62bdd48491e4d156010cfe15ad0f35af
MD5 SHA1 SHA512

Submit Download

Session_13426884926872101

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13426884926872101
Size 146KB
SHA256 a6a44206abb89bbb43771d125ef9cebe8046cf38bdcaf7bd8ec4b0fc5396f330
MD5 5e113a73ba9b0ec2990026cfc268d94e
SHA1 cb56f2e46234583c2ba33e86c2fb48e62e189047
SHA512 7990933e6ebc95e5569285ec0bad849c4c22330ad619df1ad5c35430f3dfa77a5d033cef0596cb0d7e23fef9c03047a350b5f7f5d55db3882baf38fa74f6f1ad
SSDEEP 1536:bXim6A6KOIYxzLADPjdWrTwLK5zIlPBP2sdaDH+FzgbodtV5xBDC4YCujOYAAV+R:Lnrha5zIlPBP2sdaDH+Fzj3TYeYR+rLp
TLSH
T102E352295AD9057EE17FC63AC4F921F6BA31BD4275948E0F229213050C33B52EEB1E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ad6643be7ff74c6f8b15ce107b4fdf1635852279158fe90b31e9719f20390213
MD5 e376c5f953d920e9261016cff2ce8b1d
SHA1 59c99814e4aa3448287cb3f4cd8f509ca821ed5a
SHA512 f617299500e6021f29052b6f11d391374a7b10429f9f51ec29b3a9d05175404ef1eef0d43138e5db5c90162c2a63322ef2875aece7ae82ea3be39d6c83f8d84a
SSDEEP 48:KEeIPKzy0/yFdIlKGQAWyO838E8Z8d838J8p8x+898O8sIH818xK084s8X8xA8vZ:KEegKzy2Od6KGQruZCK64j
TLSH
T17391170132BB260528BF670D95B0A52F024174B731A6A93B7BEC64E51F67E002EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a1b88.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a1b88.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 381237ccecd9aa644051db7c49fab047a1f5d48c36860b031b2b4b3d07cc0db9
MD5 c37ab3cd6c9a9fab9e4d3c520d43c419
SHA1 4fd08cab162a3e4537ae3db379322af27bae992e
SHA512 dd1b7b1d244811bd47dfb9982ed69ff9cf079f626e95ecf34091de8115a44ff57a8b8d327413ae3140d4e3068c14e45489901cd1b2d5519e81c0428294b504c3
SSDEEP 768:9jaeqD4MlshiLdMmc3+2lWPfcO2ft+fdV5R4HTytYYqgHvPw1FT+:9qcjhIdM/3+9fCfQfNWTwJM0
TLSH
T13B03CF76ECB81C675CB2C685B20336976EF44367C3C52B94DDD85A0D059B6DE130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 72ef49c24efa8aba1087069ed6e035de97043ff10e810399dccc03673652a86e
MD5 ed726248f67161fc7f05ddbcbf722ef2
SHA1 cfaa0b627544bd7eb6bb560e322954980a3a44ea
SHA512 74ff7594a7d29b08aa996f63fab84ab4724889007ff375a4b8f8a3a643e3209d5fd1e9f712fd0eed91579385c12123a64e11ec32eb6a2746531bff258172c644
SSDEEP 768:Yj+9k3+JlWPfcO2ft+f+V5R4HTytYYqgHvPw1zn12bfR4:H9k3++fCfQf4WTwJMByR4
TLSH
T178F2AE72ECB84D671DE2C6C5B20637876EE48623D3C51A64D9DC9F0E05DBADE130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c66fa9150d2ff2121a3d885807e96782bdcc9d9b21ffc39f897aa1d03c3f587e
MD5 e21e3564c860e6d39ef76a7394cc07ab
SHA1 c8e1a72b0b716c04cfec4c0a7b6cb445c65f5330
SHA512 b9885bc800978d6a49422b67aa0502ea1fa956fd57984173e8407306791ef0597b14868e17351a70e5605c46b421cc73e3fe9303ce65caabf2b95b58a0eb5b83
SSDEEP 768:Aj+9f36qlWPfcO2ft+f+V5R4HTytYYqgHvPw1zn12bfR4:/9f365fCfQf4WTwJMByR4
TLSH
T11FF2AE72ECB84D671DE2C6C5B2063747AEE48263D3C51A64D9DC9F0E05DBADE130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 425a1ee907320c1ccf93cbd7ebb2bec077c3cc108babb09c916c903ac0e92dc3
MD5 2392019b77c36c5f5052f3d386e8fa09
SHA1 faf26eefe3e4aeaec53bee508b369cbc61d446a0
SHA512 ffebdc77fb276528c95f8b13e50effac588e6fa91c524c8a626b23962100c7af8a32cd3212af5bfc3dfba200049884e65d1a0864dfa66e737c6a81a5bd120888
SSDEEP 768:Aj+9y33o1WPfcO2ft+f+V5R4HTytYYqgHvPw1zn12bfR4:/9y33zfCfQf4WTwJMByR4
TLSH
T1C7F2AF72ECB84D671DE2C6C572063787AEE48623D3C51A64D9DC9F0D05DBADE130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 724837f12664ef85f7182c5ba6949ba44147b8b363519d5f5d554698b9f12722
MD5 932adc85c0d1f80a1d3bc6f6758380d9
SHA1 3db2734c1ba42dd3285afbaea894c366e1d5eed8
SHA512 7478cabbe1d6dd01d1838b7a8fb3b8ec0b2b90056abf89747759e1c97eb2be8a054d72b721a9912687192a27af6c4b406d65805691f1195d0f4e82e2a94b1c8a
SSDEEP 768:QF1j+9S3Gwg4VlWPfcO2ft+fxV5R4HTytYYqgHvPw1zn12bfR4:99S3pyfCfQfZWTwJMByR4
TLSH
T17A03AF73DCA88D676DE28BC5B6063347AEF44263D2C56660DADC8E0D05DB6DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ba091e0c425ff1e277c323b3e3d5142a71f33fba3a49ea069a174c286860a18c
MD5 0b42b36d9fe14b06c0815ab9c6f20a33
SHA1 31225fef9036e2de9032e7f9c1a708bfc3772c53
SHA512 f7d4d7c986715ace7c18f9368645e495082af5b6a49fc33936075fe90314a84b023b519d5e7504c7fe66537e710e330d83f45222ffb5abe82723e9f816abde1b
SSDEEP 768:EjaeqD4MlshiLdMma3YH0PfcO2ftrV5R4HTytYYqgHvPgGyjWtxjTo:EqcjhIdMh3zfCfdWTwJHyj2y
TLSH
T19B03CF7AECB85CBB5CB28585720376976EB842A3C3C52B64D9DC5A0D019BACF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 43145d04422399086088a1dcc46e534f7b515db7ed2e9085ca3fe17850beb896
MD5 999faaf45667be929fa0bf956a2a7959
SHA1 09a7eb5f0b931f0840da414661d89965d3fada56
SHA512 834a9ae484836d1ba3ecdba0a4fcc50b82a2e271bd2bdca73020694e529fe8fbba7f26022059b5dadf4f8a9006e17d8cf21980211d8c0327456a0e1c2904d479
TLSH
T1EAE00446A34585BFC87D4BB040C36B3A2BA6D02603E7E36A8A2056797D227546F76EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 617927ea6d1280bba5d9721cd83a71cc88eba4c0895cbe363ae6a84068f3c134
MD5 94a768d371eb4241a4fad3d05ccfd65f
SHA1 03ed1ab82536e556ad20e88b23ba5fa6586e0367
SHA512 48f6e2b2ca32eb2269add88f5f2b0cd1e07a88cf75efd9e082bc43ea28dab1f738abe0e05f82bd5bf5e9190aa52e078e692d284cdc7a6721de8a64367e07109a
TLSH
T16CE0EA03E28195BFC8BC473104D75F393BA2A46503A3A3469B21417EBEB67547F25AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e8b7852ca40d10140594d95576b3a3c7bc59b9c252a5a96ec6b3f9cb13661f1d
MD5 56b0560f1f03042db91a0f8d02059aad
SHA1 5a682e767480d17691d608b5046eff04d26b7657
SHA512 1973fb9a677bb3285dc2793beca6fb48c40643baf15253f1203e33cb027c37fd7f82130273849b965346b3f31d75fd2c3b7e72c4d98f4aa31ffd19b5d2db579c
TLSH
T1DFE09242D74198FEC9B8473101C34F393FB294322BA2A2569F21413E7E727443F25AC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6b90475b4ff7c09451d7db06e9dee9c65bf95efbec99d271334698df66969c30
MD5 485984f615a8f62a251916f94623b5a9
SHA1 5a0fea69ef59a294eed3880f54268091c564112d
SHA512 5d56c8b58f7ba6f99d9cc792b868578c7c60b88c756d7febbb10108303bc6c686e80aea54d9d34133ef52be0e78abfc3ddc3fbbfc444155d1e4f8d176a86ff81
TLSH
T1ABE09502E38084BFC8BC4B3400C35F393BB2A02003E2A2469B22413ABEB23043E24E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d86a693cb43633371ba3e119d560375e2d03a50394d7c7813b3d9ea6787de59b
MD5 f8971fe728a1a382f4a1779bf99e6668
SHA1 de93a3e5814d2265b983ece44dfa3c530d43a482
SHA512 8d4fcc8759b929cc7c8d81805d52281a256042c9ca1676bad423771e65deb5a2518b6c97ea26d317a31e215c29ee0ac7b289832bd2778efba257ecdbca3eddf5
TLSH
T1D0E09202D74194BEC8B84B3101C34F3A3FB2943257A292469B22013E7E723443F25AC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a156e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a156e.TMP
Size 392B
SHA256 e7a387909a29e77305e02355f5295e1776d478cc725f63982c3fb1f0ac197a18
MD5 36f11031812eabb5b49c99c40827bb81
SHA1 bdd4a2db46718e2be54cd4f5dca8cf08451dea3d
SHA512 b0670b3c9a0f9f6199325c551daf0bc7b5d71eda457cf6438ea33d5da8899b378f6ed29ef08f2d9c188f1535e33f29560e018027d7cb4c22f1648b492b1cd641
TLSH
T183E00102634580BFC47C077000C35B393B72C02503D793168A2055781C223041F31DC0
MD5 SHA1 SHA512 TLSH

Submit Download

5dd2341f-7982-439a-bb67-064305db3554.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5dd2341f-7982-439a-bb67-064305db3554.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads