hxxps://www[.]youtube[.]com/?app=desktop&hl=es

Analysis

user interaction
yes
max time kernel
1798s
max time network
1096s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/07/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.youtube.com/?app=desktop&hl=es
Sample260707-e437nshy31

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
1386	3672	chrome.exe
1362	8292	chrome.exe

Executes dropped EXE 2 IoCs

pid	Process
8280	username_666.exe
5124	Holzer-safety.exe

Loads dropped DLL 24 IoCs

pid	Process
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1361	raw.githubusercontent.com
1362	raw.githubusercontent.com
1386	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	username_666.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	funny.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Holzer-safety.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3672	chrome.exe
1660	msedge.exe
8292	chrome.exe

Checks processor information in registry 2 TTPs 9 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe

Enumerates system info in registry 2 TTPs 11 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278722457719519"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{36BA3BB9-807F-4810-A7FD-0154B8BEFF94}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{4203EC70-8D59-4867-B501-E29CDFDD628C}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe
8280	username_666.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	7808	7zG.exe
Token: 35	7808	7zG.exe
Token: SeSecurityPrivilege	7808	7zG.exe
Token: SeSecurityPrivilege	7808	7zG.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe
Token: SeShutdownPrivilege	9744	chrome.exe
Token: SeCreatePagefilePrivilege	9744	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe
9744	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
8280	username_666.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 1944	3040	msedge.exe	88
PID 3040 wrote to memory of 1660	3040	msedge.exe	89
PID 3040 wrote to memory of 4164	3040	msedge.exe	90
PID 3040 wrote to memory of 4164	3040	msedge.exe	90
PID 3040 wrote to memory of 4164	3040	msedge.exe	90
PID 3040 wrote to memory of 2348	3040	msedge.exe	92
PID 3040 wrote to memory of 2348	3040	msedge.exe	92
PID 3040 wrote to memory of 2600	3040	msedge.exe	93
PID 3040 wrote to memory of 1596	3040	msedge.exe	94
PID 3040 wrote to memory of 2600	3040	msedge.exe	93
PID 3040 wrote to memory of 2600	3040	msedge.exe	93
PID 3040 wrote to memory of 1596	3040	msedge.exe	94
PID 3040 wrote to memory of 1596	3040	msedge.exe	94
PID 3040 wrote to memory of 3056	3040	msedge.exe	95
PID 3040 wrote to memory of 4992	3040	msedge.exe	96
PID 3040 wrote to memory of 3056	3040	msedge.exe	95
PID 3040 wrote to memory of 3056	3040	msedge.exe	95
PID 3040 wrote to memory of 4992	3040	msedge.exe	96
PID 3040 wrote to memory of 4992	3040	msedge.exe	96
PID 3040 wrote to memory of 3876	3040	msedge.exe	98
PID 3040 wrote to memory of 3876	3040	msedge.exe	98
PID 3040 wrote to memory of 3876	3040	msedge.exe	98
PID 3040 wrote to memory of 4524	3040	msedge.exe	100
PID 3040 wrote to memory of 4524	3040	msedge.exe	100
PID 3040 wrote to memory of 4524	3040	msedge.exe	100
PID 3040 wrote to memory of 2472	3040	msedge.exe	101
PID 3040 wrote to memory of 3884	3040	msedge.exe	102
PID 3040 wrote to memory of 2472	3040	msedge.exe	101
PID 3040 wrote to memory of 3884	3040	msedge.exe	102
PID 3040 wrote to memory of 620	3040	msedge.exe	103
PID 3040 wrote to memory of 620	3040	msedge.exe	103
PID 3040 wrote to memory of 1528	3040	msedge.exe	104
PID 3040 wrote to memory of 5108	3040	msedge.exe	105
PID 3040 wrote to memory of 5108	3040	msedge.exe	105
PID 3040 wrote to memory of 2332	3040	msedge.exe	107
PID 3040 wrote to memory of 3136	3040	msedge.exe	117
PID 3040 wrote to memory of 2980	3040	msedge.exe	118
PID 3040 wrote to memory of 4696	3040	msedge.exe	119
PID 3040 wrote to memory of 1080	3040	msedge.exe	121
PID 3040 wrote to memory of 1080	3040	msedge.exe	121
PID 3040 wrote to memory of 1080	3040	msedge.exe	121
PID 3040 wrote to memory of 4040	3040	msedge.exe	122
PID 3040 wrote to memory of 4040	3040	msedge.exe	122
PID 3040 wrote to memory of 3440	3040	msedge.exe	123
PID 3040 wrote to memory of 3440	3040	msedge.exe	123
PID 3040 wrote to memory of 3440	3040	msedge.exe	123
PID 3040 wrote to memory of 2036	3040	msedge.exe	124
PID 3040 wrote to memory of 2036	3040	msedge.exe	124
PID 3040 wrote to memory of 2036	3040	msedge.exe	124
PID 3040 wrote to memory of 4048	3040	msedge.exe	125
PID 3040 wrote to memory of 4048	3040	msedge.exe	125
PID 3040 wrote to memory of 4048	3040	msedge.exe	125
PID 3040 wrote to memory of 3452	3040	msedge.exe	126
PID 3040 wrote to memory of 3452	3040	msedge.exe	126
PID 3040 wrote to memory of 3452	3040	msedge.exe	126
PID 3040 wrote to memory of 3792	3040	msedge.exe	127
PID 3040 wrote to memory of 3792	3040	msedge.exe	127
PID 3040 wrote to memory of 3792	3040	msedge.exe	127
PID 3040 wrote to memory of 4928	3040	msedge.exe	129
PID 3040 wrote to memory of 4928	3040	msedge.exe	129
PID 3040 wrote to memory of 4928	3040	msedge.exe	129
PID 3040 wrote to memory of 3876	3040	msedge.exe	128
PID 3040 wrote to memory of 3876	3040	msedge.exe	128
PID 3040 wrote to memory of 2544	3040	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.youtube.com/?app=desktop&hl=es
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x234,0x2a0,0x7ffef3b2c188,0x7ffef3b2c194,0x7ffef3b2c1a0
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,13176870331428445683,9652987651431448727,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,4361930741325969333,4440421503359549745,262144 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,15902255146858587664,7214637570342543852,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,11241157087500023448,3144968932746550150,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,4108879588754589345,12423533002275804897,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,13608801419997454330,15636237267724936875,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,10947141447058881085,11805877105743405750,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3592,i,15169756404133851150,11691723425219529781,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5044,i,7100541056527539882,3910240630801645437,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,15735929670322246785,16958115707849335918,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,9934452794308210629,3052271383284757753,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,16723484597143205569,11065628390379364370,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,7792804236140913048,7348156094262074681,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,147071522732806248,1525700682696625904,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,11285687511465212991,14809610130202691042,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,11285687511465212991,14809610130202691042,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,16200104471990185524,16353826653018733239,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:8
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,13302562661505272086,12965836559668671243,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,13851159803615434472,3344281734840415683,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3540,i,3597287907394274805,13414587140248342141,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,6663269139127723220,17530355329304018877,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6692,i,1868149921678103285,14971316398324875509,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7156,i,1355009613717418071,3440940282608862367,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=760,i,13421115959934932003,8960817651702751465,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=756,i,14437298179460230914,4221921475195170000,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7444,i,469617530388530971,2342091717374298199,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,11867435620086492618,11895338001890752850,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7484 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6688,i,3767752769637631810,17817582361177493294,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7856,i,11852008977215509207,107177464394409780,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7868 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7912,i,12769182933607435400,16123774735308389851,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7940 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7312,i,16778581336625791790,8938588031059556015,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=3676,i,12436758276988098858,11369192424017827238,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=8068 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7944,i,563181633206922577,191197383520938164,262144 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=8040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6856,i,7789194189246267480,18378705507593776722,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:8
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,16125605199403706468,7847652187864586338,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,5379706574563117203,13330230962661193498,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=3956 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7516,i,8451820756051997053,3882273409952686315,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=4352,i,14323581567254899952,6531746024407350591,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7292,i,1917477698741999686,5842981038291347175,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7012,i,15900633201660005943,5804226067418829013,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8296,i,13054075213302831334,14724734036693880617,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=5844,i,18395305285358309456,12227927980076091862,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8900,i,2368886841186224658,3607425080882397496,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=5116,i,10668727437479582497,16092775018703833757,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=9036 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9160,i,7985937224192950878,4908294562472646553,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=9172 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=5476,i,16357660719885732558,18183649165836833708,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=5668,i,6495647927080008810,2174809288401418451,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8416,i,13006132141278954,8167480251464351614,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8576,i,6455683700661546120,13684881359081171654,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=8564 /prefetch:1
  2⤵
  PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9252,i,9178748526420571470,1587394632292726553,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=9476 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9504,i,10770546292709627743,2069930091028744894,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=9516 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9748,i,8335015475063889282,3416313814250128533,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=9760 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9888,i,2981917794502879009,2776057402535517322,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=9880 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10020,i,10697627407826222010,17691790932294802639,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10012 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10032,i,9829517397559802364,12744764398210587744,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10180 /prefetch:1
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10288,i,9994159063490267357,18344619950797277574,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10300 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10564,i,15318140490019147410,3393208188090107493,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10488 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10188,i,15196551911752673316,5979709078860604538,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10540 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10580,i,12014156278101270357,12730281085549965229,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10804 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10916,i,16344525380105687927,85301670849362292,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10952 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=11120,i,5726859020387804552,13813767208861921394,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10456 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=11172,i,8265914560058911978,13427631524657668178,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=11248 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=11448,i,3379556193386051392,1046241685297440106,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=11460 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11628,i,5217874053369564675,15797302826391451875,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=11640 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11608,i,15255774952956437600,13669037524821645224,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=11772 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11600,i,7198618087141616378,2208024583181699160,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=11916 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11584,i,2901130383942407874,14036918983804373793,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=12048 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12172,i,17819585165401942104,17030055224047563482,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=12184 /prefetch:1
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=12320,i,13787380359116900843,13829403327056010062,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=12332 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=10908,i,18300304678555853444,6291506084948591942,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=12348 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=12460,i,13990733711435474502,4575474025469308754,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=12600 /prefetch:1
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=12712,i,4972075544038587730,9375151111375745318,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=12716 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=12892,i,16519158775674718591,11512361742363726987,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=9596 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=8576,i,16214084539931715550,6545158467569004302,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=10932 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=13096,i,6340602417530881093,12504619679560483096,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=13116 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=9620,i,8671228396295506987,16437502171637756660,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=13236 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=13412,i,1061986789661426502,17234389619761201194,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=11584 /prefetch:1
  2⤵
  PID:6368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=7604,i,6732578113286234434,17218518238320364317,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=13616 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=12884,i,15906201268010674910,15505362612379617517,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=13600 /prefetch:1
  2⤵
  PID:6500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=13812,i,11641830853733213263,16037513554959659764,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=13868 /prefetch:1
  2⤵
  PID:6572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=13788,i,8547758313753284467,11738401964296927417,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=13884 /prefetch:1
  2⤵
  PID:6580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=13996,i,16954721965724398472,10846071815564847073,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14164 /prefetch:1
  2⤵
  PID:6684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=14324,i,709022350679166650,12180095381625737159,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14296 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=14464,i,12514011832290290300,1478920055710518402,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14476 /prefetch:1
  2⤵
  PID:6788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=14524,i,8322561751786948004,15297622097649688108,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14692 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=14808,i,13993059594890545484,17045331325060727131,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14680 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=14992,i,9347578868624254881,9116836941683289087,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14976 /prefetch:1
  2⤵
  PID:7016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=15132,i,5986309164795998553,5748686297862937989,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14300 /prefetch:1
  2⤵
  PID:7076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=15280,i,3133690849210564444,12048127707867084505,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=15148 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=15100,i,11549173335046104282,2542084602304839899,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=14792 /prefetch:1
  2⤵
  PID:6708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=15516,i,16573124091665983995,7519510463358624367,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=15512 /prefetch:1
  2⤵
  PID:6768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=15728,i,306492138786191940,17819395769313078162,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=15812 /prefetch:1
  2⤵
  PID:7256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=15760,i,14708769393281371836,13316099154214576522,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=15928 /prefetch:1
  2⤵
  PID:7264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=14496,i,15889017751161325513,623350567985022993,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16004 /prefetch:1
  2⤵
  PID:7384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=15652,i,5895724556290821002,1190627616785872771,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16144 /prefetch:1
  2⤵
  PID:7444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=16196,i,11109094404932800102,8173111623848672835,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16212 /prefetch:1
  2⤵
  PID:7452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=16404,i,849695772627143389,18351592122044752616,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16388 /prefetch:1
  2⤵
  PID:7560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=16544,i,9466865369083555077,15136087844243454976,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16564 /prefetch:1
  2⤵
  PID:7624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=16716,i,11444049680319962193,16751445337053391724,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16680 /prefetch:1
  2⤵
  PID:7684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=16768,i,13044209769720387151,10971845148675233398,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16892 /prefetch:1
  2⤵
  PID:7692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=17056,i,3070448609023040464,8911184429014957871,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=17060 /prefetch:1
  2⤵
  PID:7796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=16992,i,13890638087742506619,13551461603236021367,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16996 /prefetch:1
  2⤵
  PID:7856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=17280,i,14549593726661242568,5570840484636615962,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=17292 /prefetch:1
  2⤵
  PID:7864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=17148,i,16308760632374327044,11805945129500589750,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16684 /prefetch:1
  2⤵
  PID:7876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=17528,i,8683774074168523394,11436065060513133526,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=17544 /prefetch:1
  2⤵
  PID:7884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=16900,i,10884320834336988673,7160813269950731136,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=17804 /prefetch:1
  2⤵
  PID:7896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=17880,i,15100343947821789600,17001915363593611126,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=17876 /prefetch:1
  2⤵
  PID:8104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=18016,i,7882230811336932253,7972875454694846510,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18008 /prefetch:1
  2⤵
  PID:8220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=16544,i,5273719989108500528,7640476659887614635,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=16900 /prefetch:1
  2⤵
  PID:8268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=18292,i,10351538633193675575,12931940244217098446,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18288 /prefetch:1
  2⤵
  PID:8344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=18404,i,14318531143875461086,4048076569639322965,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18416 /prefetch:1
  2⤵
  PID:8352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=18448,i,15490936687406412691,5203609156133102040,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18552 /prefetch:1
  2⤵
  PID:8360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=18676,i,6167330717130348639,8977537382940939802,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18688 /prefetch:1
  2⤵
  PID:8388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=18860,i,10017002186287273948,9677300624497550752,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18856 /prefetch:1
  2⤵
  PID:8576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=18292,i,13166490737041898167,16451930083703415785,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18548 /prefetch:1
  2⤵
  PID:8656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=19140,i,10010740002895449527,17090200775251490447,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=18596 /prefetch:1
  2⤵
  PID:8768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=19296,i,8154226489920163558,13834453209165977619,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19284 /prefetch:1
  2⤵
  PID:8824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=18932,i,1389868828322163631,2402977617129022824,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19452 /prefetch:1
  2⤵
  PID:8880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=19608,i,14072490172862365189,8390263109622073478,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19596 /prefetch:1
  2⤵
  PID:8936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=19768,i,11067857994666937386,699231455570036119,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19756 /prefetch:1
  2⤵
  PID:8992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=19928,i,3580156154059843205,14863273463444170101,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19916 /prefetch:1
  2⤵
  PID:9048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=20088,i,5680413895350354998,5329753553971868915,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=20076 /prefetch:1
  2⤵
  PID:9104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=20224,i,6273672189578811027,13565102572839912965,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19428 /prefetch:1
  2⤵
  PID:9160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=20372,i,3559670726670079967,2256179530883766170,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19100 /prefetch:8
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=20388,i,293095405115520982,17369640360455339833,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=20396 /prefetch:1
  2⤵
  PID:8284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=19632,i,17738632089959020127,15323914213539586889,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=20232 /prefetch:1
  2⤵
  PID:9412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=20620,i,1300012419773307971,5890881116977144242,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=19792 /prefetch:1
  2⤵
  PID:9424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=20668,i,5020606393972544735,18209617427830798895,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=20692 /prefetch:1
  2⤵
  PID:9432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=20832,i,8871331117260748844,17167355567548048587,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=20840 /prefetch:1
  2⤵
  PID:9440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=20980,i,758467653901144450,4354191385942820270,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=20992 /prefetch:1
  2⤵
  PID:9448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=21136,i,14474869480064005509,5978325794685256451,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21148 /prefetch:1
  2⤵
  PID:9456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=21288,i,7200286383510451924,6187471500275168845,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21300 /prefetch:1
  2⤵
  PID:9464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=21440,i,8181037606243060715,3476385877655226048,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21456 /prefetch:1
  2⤵
  PID:9472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=21596,i,11784263088140218573,940163468689550427,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21608 /prefetch:1
  2⤵
  PID:9480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=21748,i,15203501113398012309,8019677012619281066,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21756 /prefetch:1
  2⤵
  PID:9488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=21912,i,15058334278554539387,9031021127249300886,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21908 /prefetch:1
  2⤵
  PID:9496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=22064,i,3602090427774135004,15671737608498769062,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21960 /prefetch:1
  2⤵
  PID:9504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=22204,i,11264137251031738456,3905809450550656827,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=22216 /prefetch:1
  2⤵
  PID:9512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=20736,i,14097200700457858514,12029284262721624640,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=20540 /prefetch:1
  2⤵
  PID:9548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=22408,i,4094949750891975072,4699458098231116611,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=22404 /prefetch:1
  2⤵
  PID:9556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=19320,i,16113679072017871867,11603003900136317266,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=21448 /prefetch:1
  2⤵
  PID:9988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=22420 /prefetch:1
  2⤵
  PID:10008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15844,i,6032016427289267788,870708347274991150,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=15904 /prefetch:8
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15844,i,6032016427289267788,870708347274991150,524288 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=15904 /prefetch:8
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=15524,i,3972151247378104734,4837897245317389898,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=15728 /prefetch:1
  2⤵
  PID:9156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=22752,i,4767591174156039167,10844771456790523543,2097152 --field-trial-handle=2252,i,17832542626014732219,9033060161324808965,262144 --variations-seed-version --mojo-platform-channel-handle=22524 /prefetch:1
  2⤵
  PID:6088

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3756

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\username-666-interactive-experience (1)\" -spe -an -ai#7zMap22380:136:7zEvent26416
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:7808

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4296

C:\Users\Admin\Desktop\username-666-interactive-experience (1)\username_666.exe
"C:\Users\Admin\Desktop\username-666-interactive-experience (1)\username_666.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:8280

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:9744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffef3b5c728,0x7ffef3b5c734,0x7ffef3b5c740
  2⤵
  PID:9168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,7136969401582519999,14585976609762318445,262144 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1900 /prefetch:2
  2⤵
  PID:8976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2292,i,4429989279432178297,8285441628771318256,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1604 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:8292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2436,i,16509035334738432406,1061075132579623819,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2408 /prefetch:8
  2⤵
  PID:8400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,522093484406191099,2185331925140702088,2097152 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:8792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,5227922455435235423,8207406935284550395,2097152 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:9652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4408,i,17215976774281832382,18359005096481417851,2097152 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:2
  2⤵
  PID:6708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4704,i,8285040977479509107,5116184108242915876,2097152 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:8656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4904,i,13534758347272662186,12212362630929571084,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:9820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5048,i,14208541757859010739,15841926480653753710,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5060 /prefetch:8
  2⤵
  PID:9484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,12737004802166519764,10633961244090654400,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:10032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6128,i,2332120672022582817,15233667324841139480,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:5396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6016,i,17784515674016911781,8314538002406733843,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:5388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,15767008723943057801,10034725254835258720,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4448,i,9387791049960211648,12396866940865130948,2097152 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:8
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6120,i,17635004389707304573,13932077192798964525,2097152 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5780,i,17968892211462613725,16322360684303449339,2097152 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:10012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3292,i,2431335632221687337,10368923974774501788,524288 --field-trial-handle=1960,i,11955804837768851282,4984801346427747990,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3356 /prefetch:8
  2⤵
  PID:5780

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:8300

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4160

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:8840

C:\Users\Admin\Desktop\funny.exe
"C:\Users\Admin\Desktop\funny.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:10164

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
PID:8076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffef3b5c728,0x7ffef3b5c734,0x7ffef3b5c740
  2⤵
  PID:8068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1992,i,15353743761658150061,12150891123575409670,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=2516 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,2390151731112647566,1744449419662737335,262144 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=2420 /prefetch:2
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2168,i,2612455497849426030,10569015779872882598,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3180,i,3307407842251650258,13384901483187925657,2097152 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=2600 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3176,i,18203782629370133314,2327835032952400890,2097152 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4460,i,6036659024525820960,5411557621852472533,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,13026299449640759922,5548331968188209486,2097152 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4644,i,997255973187514453,13286620412598861810,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=4656 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,12758152714086453645,3107219885121589113,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5560,i,5489841457622600478,851037914473270612,2097152 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5696,i,10809460309321214416,585080954432580531,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=3208 /prefetch:8
  2⤵
  PID:9248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,5336728725434498242,9799343247888520466,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:9164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3152,i,16659121534255448185,14889888255774306050,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=3392 /prefetch:8
  2⤵
  PID:9288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3408,i,4520079331801337588,6896906299185686199,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:5712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=4972,i,17654342196644880584,7834256339017358750,524288 --field-trial-handle=2424,i,1725196922410919948,4443360597805615933,262144 --variations-seed-version=20260706-170113.360000-production --mojo-platform-channel-handle=3176 /prefetch:8
  2⤵
  PID:9848
- C:\Users\Admin\Downloads\Holzer-safety.exe
  "C:\Users\Admin\Downloads\Holzer-safety.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:5124

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4444

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1660

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x40c 0x498
1⤵
PID:5396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 aaf079ed9afc9a46283c1f073ab5a7d641290078f9a4f9cf3731bc5ee3bcd574
MD5 88706e65fc1745821f56d27cbfe98427
SHA1 9be8743a9a2dec74f7c21de7f2a7e29408d25ee9
SHA512 349b21ed55502fa3439d34dfff2ff1ecbd828e3fd02fda86bb4dd113bc2f526b59ca9e2ac8340a2077bb222196238dba3f19262ef11d39414234fd2545242a17
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3feb8a8fad585c036d6b94e144d10240a9887444fd17781610052ef07965c84d
MD5 97c6739119e289c5d2053315ea36f70e
SHA1 3d31ab4ace073e59a215c2713d59919d029ea443
SHA512 5b501c156a447d18ec9cbf6749038c883be4b8b5d9458d3252e610fb8cf3c30b073ab750e235302f9158225b8934600348ec7578e67d9583af63fe0ee2280396
TLSH
T1E6E022AAD821AC2708F95B2820544746E79403567F90C80F7B3E864C8FB5A3B86A792C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0164529ac3dc52f736eb52e73272750c87b0d821caee0bf6093d1b91f94a2ff4
MD5 4c3804438590351f53871942147f305c
SHA1 87b742f3469a0bd9546c7bad10905d59125d9471
SHA512 ec1f975af37befbeedef98e4554e071b49ed1625fab6c90f21f7e788d7140f69bd919c566de030a7b45308fe3d7ab90f8be4b65805843e2369964826f7ab6dbc
SSDEEP 96:qtkPBv1Ie8GNPV+No/oq1fz+UY23YGd3WJGIRlkBRe0ZF:Ok91ICNPICnrDNIGDBRe07
TLSH
T1FE911C2A87B382A6EB110970E5E24711BBB84D8F250F7F2D03CC9875E916769863E1CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a782a26773b88e89cd831573de785b722fd6665f66a14280ca50df6d2d2abe37
MD5 71e8dfe9a0233855aa4364fa342a46b0
SHA1 ce919d0d9aead7f1d72054498c5f4d99627ecc9e
SHA512 fceccf76cd34331a6d12456d277de626282bafbd7c9eb995b23a652f96f4d85e8b4c857af2c06d96095c07483f601c98a39b7ab0da94eed3f7610658c6f95796
TLSH
T11461951CC3B381E6CB5149B4A4E24B26B579994F340FBF2A87CC9875F52A3B6867D008
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 f56d1d2b06c2ec3252e4c406b439178ffe22a4e828994e6bfe7aa8ca16beb76b
MD5 cd269baf2637f7cb5d6aa3c86e2304c6
SHA1 e24b63803ccb54c64fee14e1dd242071fd4f4523
SHA512 01aff3e61d431aef5b888676cefa1c6a059bc31808375a24f01dae194f80ebf0f1c26ce7ab4c81f844ec6362850eabe1f5c8c5b1e32058f5473798ddaed8238e
SSDEEP 192:D2t1PFQBYJm3mvaIvmX2EcT5EwKxNPGaPtvYfPINm1mmmtmnmDmH:D2t1PFQBYJm3mvaIvmX2EcT5EwKxN+aK
TLSH
T17EF1ADF7C3E8862DD91156F4AB15AF1FCE290A24431C3C6688D8BE5B93E2871E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 f53bb358b069dd2cf7ac313d6e51feb6907d519f2a27521352925b795690ac47
MD5 a1f858bb396c471e16add9097a6c800c
SHA1 bd1b9a8a57b75b376304cc179b5f7c9f0a018312
SHA512 2da08da2abbf37971f536e4e3eba91062902a950a239f16d69270a7207c08596e7eeaaa962cdca81abbe2df78a30b78b0c594675b9c91b8d6f54bed9da0bb157
SSDEEP 192:D2t1PFQBYJm3mvaIvZT5EwKxNPGaPtvYfP3w5T17mRmDmommmtmWHmH:D2t1PFQBYJm3mvaIvZT5EwKxN+a1AfPa
TLSH
T1FFF19EF7C3E4862DD91156F4EB15AE1FCE290A24432C3C66C8D4BE5B93E2872E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 e0f5902f7ad303c2998a36e76600fbb629ae8d3fcbe7bf215fcc32fe557d77ac
MD5 f9034cc6dae541f12061044128629fdf
SHA1 d32177f9489aaa0ec961e458db1ee94b3fc7081b
SHA512 c4b7a0b14eb34059aef442ae565ccfa646b933554784ebc499ce97852d37303b34d37b959831b279ec57bb0e35e772a2a3d8c30a09654e13d0a1d7a8f8ef2050
SSDEEP 192:D2t1PFQBYJm3mvaIvmX2IT5EwKxNPGaPtvYfPINmrmnmR+xmmmtmDmH:D2t1PFQBYJm3mvaIvmX2IT5EwKxN+a1O
TLSH
T106F19CF7C3E4862DD91156F4EB15AE1ECE290A24432C3C6688D4BE5B93E2872E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 68e6e5c8ec422220cdf48764094dc8b81f5079bdea5ddb48af92a80845e0d2fc
MD5 0df47605cabe22dc6434b3f5289a3631
SHA1 6a560bc72adafcaeff8585f8be730088bc0a528d
SHA512 6d6fcd0ac2cd22864a8f5fef89c06f81c6428d2141d91a2626c3278776bf916dc43ce1f5b8cf9139bf33529236f130880cbff85691f4c19e991992aa21cea230
TLSH
T1CA31489795BE74AF10785DBB1D087C062DBAA875025178F4CF97C22EE0C64F75A1241A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 9321a173aff288bb5d41f0b9901131a5101b6dba50b0bae9e52a80a92b4ed010
MD5 93d1e82b7d16a526088555dd259687af
SHA1 f1124ee52c99a339ca9094c86327ea1136f791a6
SHA512 9f48ae5a4f870a65e5c3a349470d1260de46ef6c9973e60f7fdb79544330ebeca9542a2f52ed881efd3e9192f855c1f803a350444847e69d61318188abb075f8
TLSH
T17F317BA785BBB85F00B8887B0D047C056A7AB472026168F4CF9A826DE08A5FF4B2501A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ad672592599049e02e611ed07ee95dfe394476fdec1dd4992a87eba20c9ed2f2
MD5 350a85ecabc142da6688d10018b1426d
SHA1 72177df525650fd1d8d2bef38c9b9b1370475d64
SHA512 1bbd89c67beaafc083e604481d9e81a66476cbf6079ed6016c673fed9729eae08d255872b942e119fe8462c5512169c2ba2bc741796d878eaca32ef80ba3606d
SSDEEP 192:SRLcE/1WPE1jv7cpAPRp2qg9BHsb+WNnmj04f2B0TYa8NBVyIsnAUgtaJ:SRLcEdWQbwUXlgrws0q2B0sawn8
TLSH
T14C42F92EBD54247B9CDAC31AFD653B53D7F9102226942E84E6FC8A2C19E75CC321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 94f9afb83a3424f61879803770a8ef742cf0066376a3b7622ac6a79f1b2fec37
MD5 32ead6db24b54876813b90d94db3ee5f
SHA1 0ee805b9f274aad121636d2bfb831abcdc4c4863
SHA512 c647167b2dba5cb433d7c9fd6daba7685c93a657043e5599149a1758f1c0011b052491c3ddb88776da662274689fe469f6d2346053601d0bca07912935b8f47a
SSDEEP 384:SRL8mzEdWGzGwFX22rwev8H2LC2B0saZne:7mzEdWuz82rwe1e28Ze
TLSH
T1B662D72FA92019BB9CD6C31AF9557B67E7F5102226942D88F6FC8E1C15E76CC321710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3b4dbf8ab0611268c38beafc5a4496b611761596e377ef08bf9e0dd67cc0cb60
MD5 f029becc89b49fcd587ab6ce1d753c3e
SHA1 bc3b1c15d6e4f9d86c9a1798b42fb408f1888249
SHA512 0d9a35f39b3247b5b7597a068b707fadc432718fdc0eff6de275381e238d942006480c99d116e4e6cb8df5ed2187d960b37baf8031ac2da8e7ecad1d2a0faf24
SSDEEP 384:SRL8mzEdWGzuwUXl2rwev82xP2B0satne:7mzEdWur02rwer928te
TLSH
T1B452C72FB91025BB9CEAC31AF9557767E7F5102226D42D84EAF88E1C15E76CC321710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 13bdf324c3666da8c6608edb64d25601849451bc96ef4a20f5e3d15701f61314
MD5 6b78b1e6f20ad9a433c161850a32fe9a
SHA1 45a1ba9db475a9ea33a5b40a4f7082098fb65e36
SHA512 e0feed791c757251f4b50ab7cf83104373a2bdf760debfdb7e5fcb4c8eabd4874f6e83b5d1498e35a639cd7916b457952ed1355f3a4901bc280894e22e28d88f
SSDEEP 384:SRL8mzEdWGzNwUXl2rwev82xP2B0satne:7mzEdWuG02rwer928te
TLSH
T1A352C72FB91025BB9CEAC31AF9557B67E7F5102226D42D84EAF88E1C15E76CC321710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1e436cb5fc43401b5d9d39e39ec3a4095f3f11567a9e18b5d82bebe8ebe45026
MD5 57e679ca854acc529e3311ec515cef1c
SHA1 5e91ab9f2f94e9e9de8b674f158349b3d66d187b
SHA512 36eb285674b24259d6c4399787b996bf2963a61579b5e3fc3b33abcd049e8161a68624048150ebe672f7d80a52217421fc0217c00d44512f65c42388343d5dd7
SSDEEP 384:JRLjmzLdWBanwFX27rw95q4F4Ay2IC2B0saZwe:jmzLdW0w87rw95qa5lP28Z5
TLSH
T1C662B71FA920197B9CE6C31AF9557767E7F5102226D41D88E6FC8E1C16E76CC321710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 fdaee9d5c67ba001b96e2c1ebd4c66fdc434be1ef56f6b440b6ca1e3b02022f5
MD5 26de7b8f698e0ed6db707810d19ee456
SHA1 9bdab40830ae802cf2fe90429ef59209e564d663
SHA512 e6980f52c854dd3859097073b8e6c3606441ce15152285900da3839ba8f138fbf1ee0c465182c4859a55a899b0838b573ceaa16f04ddc58d3fda7d4aa0f677d1
SSDEEP 384:SRLXmzydWGzWwFX22rwev8H2LC2B0saZne:qmzydWuD82rwe1e28Ze
TLSH
T1A662C72FA920197B9CD6C31AF9557B67E7F5102226942D88F6FC8E1C15E76CC321710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a8a92b23fc54ab353e2ddd86606c053fd2007f97d400aa274cf9fbe3cb43e107
MD5 73153076ab8d1f85e62ddefe0bf0abfb
SHA1 c4f23b3340c0a20fcf3f5be2b70443bc269f699d
SHA512 e3ccbc7aabef1eb5e5f20148a4be2bf94c2b050aeb3033e90c767bc5026c9006c1a41680c3c46eabb3335625276ba5266eaad21316ff3f73531baf89874aade0
SSDEEP 384:JRL0mzydWBanwFX22rw95G4dH2LC2B0saZwe:0mzydW0w82rw95G7e28Z5
TLSH
T18F62B71FA920197B9DE6C31AF9557B67E3F5102226941D88FAFC8E1C16E76CC321710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 01fae61670a225b8c4fb64098c55c1c1530122ca1388ddbf25c35cf84d71c6dd
MD5 8be6566595e92b653e9754efdd33baad
SHA1 2a694056b2fec7742f64c3f2fed9c0ba1ef9bbf6
SHA512 40c86ab4e93a0a8fa05891f3a7706e9a6b64514ea3e0a50d0edf99efefcc5bb81698e8cd8463d71b3dde7c8e449260d127dd64864f1dd92bc2cc8a33825aee43
TLSH
T19EB01250C0015A51C8070BF81152148C71149F11A70E170143E07D27CD25260C075051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dc844.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5dc844.TMP
Size 96B
SHA256 4960d863bb7e775bf0aadb62c580ed5ec1374a68a35abf60fb19b901c1c145d2
MD5 203e6f9ed4c7d679daa9e38a1a49708c
SHA1 b4ac26e5351f26600239a86c8c944d0f505bfad3
SHA512 c1e76608888d5ac4d98971414f5bcd12abef45e762a11c688a97070b952b9a3b42e082df7a5634518a26be25ee6ec7f37e19f64a4a2f4ea650fda11c4e9f9a1c
TLSH
T1BEB02203C0032232C00303F0288082C83020EFA0C203022283E00E33FC20AB00030020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 a84bf78cd0c1dd10f2e7be49351fb4945a8e84ba6a4bf45f86c858a0954c23a3
MD5 4dcfc0a22455dca72b5775d6243f618a
SHA1 5e3ec632198ad3615e81e699d55906d659f0f15c
SHA512 742cb881f5d9277fa0a2a020ab2b06d6210549ba25f3796eb5218fd68e19f5f41e934e332614bb2caa890d0dbf021970f5a9d5a8792f186d7cd7bc48f29f935c
SSDEEP 6144:eu39wKn2/yjJX2/T3aBwFmUi21rSm8uUVNSlzYG:d39pXqrfi21b8j8z3
TLSH
T1BD341234AA61FCF699B921403CED641CDDACDA438D84CB045767AE0159DA3C22FEAE35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 5f4a84969fbb79393f7cc00e880653e3f790c11984ea87800d76ed98508f695b
MD5 cc6b8f3b7b48462662d3cf285eea86e9
SHA1 1e2fe1f4d84b856ff3fa1744113555c59296af92
SHA512 228a2c226a99a3f2b34f3ce421917ad8a4f39e62a19c1d0858e7506196f4d78eb72bf8049d76c9ae06582f44b3359572e80e6fbc736fcf10811146672dc91801
SSDEEP 6144:Jc39wKn2/yjJX2/T3aBwFmUi21rSm8uUVNSlzYG:O39pXqrfi21b8j8z3
TLSH
T16E341234AA61FCF699B921403CED241CDDACDA438D84CB055767AE0159DE3C22FEAE35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 9e8c44a0e15ff2009ab45ecbda0b404b89f57b2e406ddc2aaabff5317024668c
MD5 9b1c2f15e55035d1799c632424bf59df
SHA1 599a11d637d203990228005d8c512a7f29564035
SHA512 bd847bce88bc5676fc8298c0afcd4e227e389ab0a6fbaa511e327805bf2c53cc13beb566d8e8ece8697b5a6b866f2db219b6e587eb63f73ed7f807dd9e2b9432
SSDEEP 6144:539wKn2/yjJX2/T3aBwFmUi21rSm8uUVNSlzYG:539pXqrfi21b8j8z3
TLSH
T16E342314AA61FCB68DB921403CED641CDEACDA528984C7415767FD0055DA3C32FEAF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 d1e49b2f454df1f4153a0f52d44000983f2e2af5259b63931f4ca2cba5a1b107
MD5 b3dc284999527c2d3da4489b30912f2b
SHA1 17640b8c53dbfc46269b3babee1340756c0d7bc0
SHA512 4535f360fc8a7169651b8f2f2597ac252ec695db2445ac812a3cc5f0d3dea29e56cd4a3e1a8ce48edd9c2723dc32df64e0c2b664032633ef1f5d12e16bc12586
SSDEEP 3072:S3FUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:WFmUi21rSm8uUVNSlzY/
TLSH
T17FC313047AE3E8F2EE5930447BEE2A145D6C0D818291C6415773AD419DEF3C72FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 423e9eee86e6689c5e1bcfbb13ab2d7ee49283bec65d99e0ca155c9c1eb65b93
MD5 30c054023a43bd89ffdeaf6112ea8d2e
SHA1 89678d6c5b46e80b036de85b37a2b7eb48cdea96
SHA512 adcda00b8338f5e576c5c184ccc89adb84fcd2cf87d1d8b4d5b72005f1f9f283a2e134b04af6454589c54d8aa0661290c393d07fe906d3d8ce1e0270ca150398
SSDEEP 6144:Q39wKn2/yjJX2/T3aBwFmUi21rSm8uUVNSlzYG:Q39pXqrfi21b8j8z3
TLSH
T154342314AA61FCB68DB921403CED641CDEACDA528984C74157A7FD0055DA3C32FEAF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 140KB
SHA256 51561c847b7ef1e2ff0fbd991ead430eb7654601ed8cebf492bcf6f182f0422e
MD5 dc27094fd73e69a362cd1d5ea0ffaff2
SHA1 98de2dc2925448af50e8ab9e774ba1babe98d0ab
SHA512 f329c92b10cc85323ea6a5f7589754c3ec90eab45c58bf87029bf89b22fffcb91d4482579616e507c628862d7a58c9e3c887ff05ea028231281c00ab542964d0
SSDEEP 3072:St/8ekp3BbvsfZhAP/P2d4akxn7XJX2/jasBEqb52RBA:P39wKn2/yjJX2/T3aBA
TLSH
T114E30229EE30FD7A04F541473C9D600DDAACDA928D448BA4DBDABF0412D539227E693B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 140KB
SHA256 9a82ab932d07bf2c76e0e651eb2d74e6b4ddb9c915f5cca9a9ef237556f979f2
MD5 b19521952fcf8bc089f82386faecbe0b
SHA1 ba8911fd9b0c532074406b241014c0c53c479419
SHA512 13b296284e70a1aade6bcc9706369022b971e19e314530157c177082319c41a5ee7f52b1be782dcb8a1cc6e5e8f8cd427704db30aa261887ffcb95243d582e0d
SSDEEP 3072:SH/8e3p3BbvsfZhAP/P2d4akxn7XJX2/jasBEqb52RBA:i39wKn2/yjJX2/T3aBA
TLSH
T18DE30229EE30FD7A04F541473C9D600DDABCDA928D448BA4DBDABF0412D539227E693B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 c039c9c89f2972ed7dad0e1c85dceda40494031dca164ad5a64e1bd29bacd2a7
MD5 e849f8b4147e4f5199bc5332d8355f55
SHA1 696b6f9705105d8799f789e9de46f9b30d4ead95
SHA512 1bdcd548e2fee0a5faf81944fedb56404a042c78bec439e2826f33ad2bc910d7825488a859ffed8f46df57a8e7a90a6ec1e3931b14df2adb29039104ffafb051
TLSH
T15EE0D85B5BC4D2D49B229B87859FD26451F0B31B978CDC5D2B94706C35400169FC88F5
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 57KB
SHA256 6303475cdd19a7c08d011c6c6862e3789b39f95797602963a78cac17ff73d1e5
MD5 73fe08c0771b0b44243114c8ea8b86bf
SHA1 03015c3d3ea5bb634dd29a50623a6147d206dc0c
SHA512 f4fe1b7b7562c4f1187ca0621ff4006be0fad055e41d772a1ff4a421eb0d18794e3c21dad72cc469b889c6ed9642616ab9c8b5bd27d87d8fb5b8f228c96407d6
SSDEEP 1536:5HBwP9e8JdgrDq3W2leMPq1AOFgHDU3kQj2W:5hc7grO47C9Du
TLSH
T1284302CFF0D8C6FE215052556E6E7628C261891FEB118DB2443F2FB2999D04172FBAE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 650KB
SHA256 639899de1de5d86a4229316e87638cdf3ad27e09d5bf8da88feaa4196b8d6622
MD5 f2612ecfae5cb298ab3193e3b3ad9d2d
SHA1 b4900ea1e2e8886e55dc1001456d43c803c5ca76
SHA512 240663158dfbb7bcbabc51e1a2026ab26093ba111c2c420221be3a484313ae1460859fedc9628d13e7c25f64c11ee3c5832d945b2ece4bf03244975bb6496df6
SSDEEP 12288:jOiE63RCkxN+4b0cV5dmGh3R284BQ3lxPoJ2SRU9zbWzW:jOi3Ukm4b0cV5d5h3X00lxQwS+b9
TLSH
T14DE4239626AF5BD8EC178CA3EFA8BF20950149BC41FD4AE5AC2479BD25F5F3841013C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 22KB
SHA256 2eb2f4af8204cd39efe93089c04a2d81b09033762d690723ca68bdc5f604cc9c
MD5 5eb0e1552f296aabb112fc96e968dacb
SHA1 13f8be48afe5edf8226462656d9a9e3508869524
SHA512 ee2b64d00b83f7ec4e9799039bfa5d7907323d59c7c3a20314d4e23e8b681958ae9e4676a1fefd1cb03f3301c8dd0d1ba2e2ae35aef414ade9238fd04d6be1db
SSDEEP 384:GcX6e78nP+NgeicLBwOMvsZgud6B4cnNne8TZS2lNHEsbblkyNVoizNb5Q:GAxK23HLBwOMu/CjnpDZS2vbblFhu
TLSH
T1EDB2E05F5CF81CD548A10EE0FF6F666A6586F1D7B003046EFAC522B579EE941340DE21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 34KB
SHA256 4e9214f1ec6289e9b69603233e565c3e5f9edeadadb0a3192c58630586216aec
MD5 87140a8197aafb25fc35d69dc51c3151
SHA1 e8f65e601bcc66bb663030312979a169f2191136
SHA512 f2c16e36f248fe5aefeca33b9766f4b45cd0013349868778041a8e14c112ca4ab4309437d643ddcbb1ccaf0d138f4087e5a529ea127783bbaafd89e9a6538b5f
SSDEEP 768:qAlo30H9Md0aeC5zvix2xGJa2eKs30WkuvIovvt2:qAOkH9G0DWKx2xGJxeb0WkuvIo8
TLSH
T1F6F2F138123FE38FD0AD60195FB6765261EE69EA3C389350D3737A477486813722A463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 274KB
SHA256 9de845ef315d67fd3b8951be1995564f7a2c77104ebfe28429345904632198d5
MD5 42064c2168e1f275fce52d12f30eddfc
SHA1 d5a79d083de7854b5b5c041e47751dab9de739ff
SHA512 b6d7e5b599e7264b531a7ebf72dd1c212563732077409c49563188ec3479cbb90f8c91c8362b16e55012b41b4a1450269cdafaceca9820a5f89219250e204c60
SSDEEP 6144:VUriuc6cHIzWoOBw8y2gjlT1mToRdfSSXsi:iOuc6cHI8BwX/KUfSSci
TLSH
T15D5423B0B89B0F9318117A8A202E47B14AC8E5543CEE719B89493255B5FBFD6523E1F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 58KB
SHA256 facb8656daf3bc525dc4d28cccd0a0930074a3060546f9dc8ed9ae0d151421e1
MD5 a502e8a292b07db1c13a327c27e98674
SHA1 fa4e85a9e8ed2c11a5b0defc4e3d5a15f27846c4
SHA512 b766378ea1512a8996eeed8646f45e9f8c0d7f4232e46b7aba387d22b3377be11319689f4466166bc6ca0148a224ca5a65cb81163bd35eed3eeb2a7d5411510b
SSDEEP 1536:qPhEyP72R3/6gKM132SPxGuSpHTF6pgprAxYXUTPsVR2Gfk4:qNP72RfbvSp8qp0GXU7TH4
TLSH
T1A24302A1632F31D6C73A7BB8C40514279ABD37611EE6C012E29D5B161BE89F72358316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 401KB
SHA256 ad33d922bb236bf65103274630c0d496e14119ed27f132ff4fe1e0511f2b5be7
MD5 1e27fbfaedcd2c268cb7bb268ccecc3c
SHA1 45d63da9551259e1403b30c4f6871adf065c5056
SHA512 6a899d9921ecb612d7246d1593d6aef339ad4b322cd50463b04be83a0f69fbd215aa30e89db7d309924954446c31a17ac356739826ea3fd4e7a6f775470b3a14
SSDEEP 6144:xe1PXpwI2X4jEiP98U/CzdT7Mra9KJaHEK03W5H6zlgn4C5Q:cPZwI2U98U/CzSa9dH83yazlgn4j
TLSH
T1C49423EA3D71CC5433BFD793A5800B4D146A79E66ED54A07A623E03D1C28FE5226CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 67KB
SHA256 1401675df01610acee18bff52f23e9afab46f39fcf1d4a369be8792171435be6
MD5 bac3c92b9378ae21fa982be9cb059c6e
SHA1 f9bc86c8e09b733d147dc3656e112faf5d3fa906
SHA512 8b9faa55c1c3bb3ea6046944ad6a19ab186bbd8b04c7c423e7c5e89ed9e12714c5b4a6b5c6ed73ef277ed252928ce633d10f13f92166bce83801812ba8140c3d
SSDEEP 1536:MPSR6OXg/4NDxhNq8ZIEpkNLRs8aM8mD1rMjk+Fhf7Qw:yg6d/wrkQVkNLRlaM7D+ffMw
TLSH
T1FB63023D2D8BB6739B2AAC1A9041503F63BCFF72C8215A3657015E01F19ABB7D7E0469
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 68KB
SHA256 90e39936fa4a20f0fcdafc8ce17bd53e662b5ac7fe4c810b28ed5356b9da6d02
MD5 8b512e3b59cb89f3f306e9e69f799ab1
SHA1 e0a1c29cf12aa60249c80da1600a2d7778984788
SHA512 d5b39e2618e5cfcde62a34552aa24def071b21cea9913296d33edafc7fb024426ebc8e92550b40f0bb3231c8ddb2945538a7e6c0d4f308c7cdac7d5e53745b87
SSDEEP 1536:phILhlQU1HUf76Z+AGYguWv0KxwhT30N7Xw1RJiuwPy+R3zP5:p6Lhl/1HX9GjuW8KxwhYRXw1z+55
TLSH
T1FC6302008F370176B188A8D9FD49E3B6CAAF58E0914BF595020B188F7F5F8D1A55D2BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000eb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ec

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ec
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ed

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ed
Size 30KB
SHA256 88541123eaef23dbe91e73ac284783d4473a0d67839028b5e6ce29dbe3c3360e
MD5 a7d215e32d203e309baf18e75d5cdd9f
SHA1 420bce37f2bd81a348235232534e8c5efa68d5fd
SHA512 b32077608d039083d85f8f912a4410fe8db84804acc24b46c79a988eb074cc4eb405e5b602e8e15f46d6852e64e85e6dc20b608138376bec0270ddf6fe2ae912
SSDEEP 768:bxKY4Ex/ay+d0OqgnQZ621H0oQxOKugu7cfmLkj4Dl:bxZ4EFayZyQZ62B0oy1K8Xj4Dl
TLSH
T147E2F16770741C87B811B1C9B45EA271A83BD53AD7CD3468ACE4AC970C8C9E75C94CDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 10KB
SHA256 ce774c8a3943237129f65ac74aa3940bb57ecb39d93bc27f71d02c240f5e8c64
MD5 8cea524fec52d1e1fe3670a40cca3e12
SHA1 782194549ffc294e65ef45ae8ba512e833673aa5
SHA512 4f33edeab0bbdf280e5489167d7e72d8f1950bde12c30def2121e5f9ae928ecb2095f1d3810a9c11d75e1d0092d206425a3aa773a721927e8a09a38cc8c3099c
SSDEEP 192:iqczUXA1LeOZYaOqE3Edt4VWJQM3+2DCg4BavtlWNb47dgF3:yzgtOZY/9Uz01M1D2BavhdgF3
TLSH
T1A82275321ED734C0DB6441B6D8D00E71B1788C8D0A8F7F764A909ABEEA2B3C152F5966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 2d9eada61ad89d253afcd9dd799f873eba32bdf1c038b6cd57c3799e2f3de252
MD5 c0563f87f11bc5ac4ff955a6051927c0
SHA1 9db548faa9ed3c6aa449fc0a0b7e41d695be4618
SHA512 64308a4fbc4e2c9647fba1aea7afb46589c160bd7497657ccca536bce08abead38b6e11e284c5f0514eea71fcac9b918e4c632b33aedeab2f3fc7628760aa3d3
SSDEEP 384:jxJSOiBXOMG/caYmupEyjUqnCa6ytivtx:jWOiBeMGQmupEWUqC4tivtx
TLSH
T19B623E221B9720C1CBA04475D4D50A31B17F8C8D0BCF3F761A649BBEA66B3C163B596E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7ebda8e5b0d88c0c2f442bcc80aa5e72b9c2024d182c0560dfae45442a815ccb
MD5 feecddcde87510c41ce7570340ed5660
SHA1 a4bedd3008e14205f858a2ef7e1c768df97d7e68
SHA512 0a871a8994701ba16e9b864bf830b02738aad6ecc269ad8094c410d4bbeec936f752ceb479a1309d832d2d4c9cc1de169871160199138a80dd046fce45105370
SSDEEP 48:bEM3iccl/50BJKJMtax0O1qI9VDeOxSfobP6h9JlxBWOOEGZB10iWpi:bEM3FYKQzqAVDeOxkobOBxQOOnZBIi
TLSH
T1F081703769A60985D760A0B0D8990B11F6BDCCDD4ECB7E661D404DFEF51A603B322CE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59015e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59015e.TMP
Size 3KB
SHA256 aff8cd6b0b1fe6c9c737e0d13b4a9a5a70d091df416ddf0ba46fac23f4a09d13
MD5 b85c6755fb8bbff60ea23f2fc0e9a28b
SHA1 ca933259206827ed248a4733d1afe572c0fa4592
SHA512 f381d5e7e0f04f9c8eaab49290666a184544d70c117b47f5dc04e5fff868c188e6aa60c45364f53c9fc047afa9ad0853ed94024291f05cd818b841d0824c34d2
TLSH
T17C71193726424952D34020B1E8A91740F6BDCC9D8DCB7E6A1D904DFEB919B47B306CC8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 17KB
SHA256 4a9a70ae07e8181e914f0d2c423766b3edc13bccb6c68a311383a9ffbb224355
MD5 d4347a04217601facd1aca9a6b2463d9
SHA1 13abdce746f624c5c18ce63c7d4ecd8a989f2f1e
SHA512 c4d6f126e960926a531a6ca1ba0ef9109d12b67e688d07685d5491b5d84ed7054390f2eb520a379d83de9a1be8014a3007beeb8e9df7aaabe3739ca456bfe30f
SSDEEP 384:/yqrW1bfUdQ45yGm5PxsJdZQlURsJeOkwvO0O1vq:qPJz4y/cdZO+sJe7D1vq
TLSH
T1C982BF3A3DC98892D5B6A27BD4FE11DDAE31F8083559F448A742312C05A37BF2856F0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000015.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
Size 175KB
SHA256 6724ea984691672a2ffa81b372e92a72f08cf0b11bf80e1508b2506b0394512f
MD5 896a69ee0fbbf2be286c50c4bb3ad87f
SHA1 e2597f53347c2db93a47ba3485635373cb94465f
SHA512 f1a6cdb173749ccbb06ae99ac09fbafb30aea7b6bad0e7e4e50db8432faa10de6718c212aff94bc5fd2246cb50a4165e5a0032efcef4c925780029e7e16e25e5
SSDEEP 3072:S+lxX5SA3t3iTgihUX0s1WVzJgR6wt9zRRk65nzTgR69zddw/V8qLlj++ap:lXvX0sezKzzzn
TLSH
T13B049518B112D3C9F03E9377161E5D2BD235D5C4A99834E9BA623E0C36FBB403E92769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000017.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
Size 17KB
SHA256 ef099b9ad4dae5544313a5d3151e83c923a65e9931ac218cd66c8411bcb1f69a
MD5 a22b9160339d9584292b435a750ae0da
SHA1 b657d061402c3b01509417d278d85f613864c2cb
SHA512 0a35d77dd4ae6be7bc1064cb8560804f578a36c9575d37ada769f1e0068789f9f9cc6ce861b7cc77b1cd40d5b6a2c18230cced68b18a2ccb141f5b766291417b
SSDEEP 384:FhCdOvN1o8f+DGzZ5Jdyb7UURsJeOkwvO0O1Wk:DCK1gDerdyU+sJe7D1Wk
TLSH
T16D82A0662ED88497C1776376E4FD028DAE229C0B3545F4EC9743322C48566BB145DF17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 5KB
SHA256 51e7d776b53d57e493fb6a39b79c8de4443f8747daf60d56916e72dc9d0c52bd
MD5 9fa2f80563ec0481c6b85ea9377d0996
SHA1 3f1e94a87aae16d9cd5563b762471d13629d0e75
SHA512 3735993f58cbeb8aea4582da3ec486b71834644262f0d51c0dfb90fe2d3f81f78d913ee7587e43c5d9094a48a330c9b17d62efac43ba39504125878c623a5b6f
SSDEEP 96:1mKCmKCUwJHUGVyudiCd9DINVFHbBXrIUkVVCBgKbieiPfcWMVVS:NlRUZu9947eUX4paS
TLSH
T120C105C31B8854E59553D251822CE09289F8F335675CDF5CAEA8A29F03E002BDFB68F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 1KB
SHA256 f7ba1c541ad54972e66474f6917ac4ef7210a9f50b24a74077c58a5fbfb561dd
MD5 120d61b03ced9e1ad1caee55b7d6b2ec
SHA1 f65e0751ae6f542fc9742f03dcf2bf412aa5acbc
SHA512 0ec3b89fb15a8ec673f94e95ae783f1af4038016c5897ad1d2cc3a26257f99c21cd9663f5f47f9ceb8835ef54658728ce2b2a5b6bd84eeef8af43a78bba35495
TLSH
T10421D840EFD84492E6BA0EB4163E3449AA56788D1C67DE0F1355215F85E2F81DD30A3E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 2c67c338b8f2fce4ef5404495f8639aa646a941db5a2899abb09e0c2c70fcb50
MD5 6c4c98b4bfeca2ffbbb1154f17446e34
SHA1 03891fac47c11eb8792a2c159633119ccc3b557e
SHA512 4c471243dd4c4f99ea49857a6d94baf422466ec12dac182b237d221a8183ff141b09a7806bc9e49b3472ceb9dc4e879a68489883650b5168144eebcbaae9722b
SSDEEP 192:DWhp8U7UZ/TgBfYUn/JeUadXUZ/fWsUpFlYVGZK3+2rU4WhW4WXVD9EMGRj6v7Ov:DWhp8U7UZ/TgBfYUn/JeUadXUZ/fWsUF
TLSH
T15322EFF2C3E5862DE81156F4EA183D1BCE6D0E2483683D2AD9D4BF4F93E5471E201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 53KB
SHA256 da10a56e14ad1345d667178cb7fb3585d9ce9126f881d8de19fc7f6c69a2ecb0
MD5 81eced95c7e6c49e386ec1e1365764a0
SHA1 f001762d10714dc79452f4af8def25597749b293
SHA512 17320133f3cff596f7976ab6148b1b5cc93b2c852b961078c3793f4d906d262ceba4f838723fba49a5ae07e865aee0083d09ddd2b0f18ca11c65eecb9f65b84c
SSDEEP 384:DWhp8U7UZ/TgBfYUn/JeUadXUZ/fWsUpFltkejbjej9jORdejxOivPJjQJjYvCDf:oCHVfEgFcowlKIhG1JRiBjKfa5A
TLSH
T156435CF6C3F86B3D9D316AF46A1A2E1FCE5A0D25571C3C2A89D46F0A93E1431E101E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 921bd01ea5ac54bbf99edd431c2bd761d1339d8369bedd6315c02b963e440a67
MD5 b9db2199927d9389ff0224c9a2f7f53d
SHA1 816b144688e6714df3d926f77ac96b3bce0c942e
SHA512 c3e9bf5feefcc0d6ccf818620b4fd21e7b7864d6c9f26a6530208e55db82574094da3181206dad28ac4069de48f0b347c5b38467a0ee1adaa90077d17236bf3a
SSDEEP 384:DWhp8U7UZ/TgBfYUn/JeUadXUZ/fWYUpFltkejbjej9jORdejxOivPJjQJjYS1ZW:oCoowlDPIww6
TLSH
T16F82BFF3C3E5862DD81156F4AA143E2BDE2E0D6983683D1A89D4BF4F93F1471E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 778ca9c87a45b3aec400fc19a456d0c2cc5ec5707632fc39873f7f482f9c454f
MD5 8783a75eff5aa9391df7b042ac61e4df
SHA1 2aefceb75d48eee001fcd6a3899de2e1aca53221
SHA512 e0ce31c8573de1c8d774ecb7441175b40c862eb70ad558746c0877d5099b38ff01698d93f9230795cd706308d3d63f8660269b87f65bd9f2a3dce5b6f8fd9a77
TLSH
T158D023331302B0F5D56C7DC98565BC8FC72610700501DDD411D095DE093255C1947249
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59ddd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59ddd3.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7c0d6d7f160607c3ffd0faf77dc35f1a8cf686792cf79a545f4d5f6cfe8fd085
MD5 e0afffdee6d26ef629b4a286f019ca06
SHA1 c2fe1a9d8f03af43b55da22f2bbc63d39e902fb1
SHA512 c0bc597befdf82634183537316701ba23593d1e05690e1ce491fb8d3e773b00a22cbb8e4ae3e2c25b6c3ae260d091885f6bfec455878e6993aaea7352aa104d4
SSDEEP 192:sxZzR/yM/jK1Ml8MkC/f/syYRrVIdp0lS9ePHW6+WNnti/YwZYd7IgrJ:sxZzpMC/f/syamAywHbg/89
TLSH
T12F52E7166B349977CCDBD319FA41BB53D6F94422D2940E48AAFCDA0C05E6BED620381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 79a6aa25afad047d6fbc394bf08236c3ae786df2bcca9ffc244115fc324fab39
MD5 7184f8894853d2f8ecbf424380cb21ba
SHA1 d285d9554896fc889ce4edeedf2e18cd643ef69f
SHA512 e1ed75c261edc47eea8460b4ad1b5a6f049d8c8ffd7efb3140ab6fd44072acddfc27aefe68f765949082bb33ea7a783ae76b4e60a1781e500334fad83b46d0b2
SSDEEP 384:sxZJ8nLELOC/f/s+gVE/jowyLHbaYjedBefi:sAL1C/fJgVLHbajH
TLSH
T1FD82F8076630497BCCEBD219F901BB67D6F94472A6944E48E9FCDA0C04E6BED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 308f31d588ef98a434f4fb703649269c42f5ea55c6dc4855eae255db3cac58ea
MD5 2c10c3edec4337b49fbf6621988e42e2
SHA1 ff7f5d4d49284dab9bd36ae1d4d3c48bdb240b6a
SHA512 6b603349eab2fea453f76c869c973587343116d44e9463a6587c01d546fcc13280a5563d4e4dfcb928bb2a4b653d310090976dbe28ae5c1e82de31cdb8d45801
SSDEEP 192:sxZXQUnnR/yM/jK1MlnMkC/f/s+YRrVIdp0lS9ePHW6+WNngG85XYwhxYd7Ig5iJ:sxZbnnpJC/f/s+amAywHbgn5X/q4
TLSH
T17362F816AB34597BCCDBD319FA01BB57D6F5446296840E48AAFCDA0C05E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 3368c20281aebf1e00a215c96f07f0a724f20219a234b49c6c921c3a0171a1c5
MD5 31747a1718672bc21d65b9111ab107b6
SHA1 a36f3248779c350ed4e30092993b3cea2fd89f12
SHA512 d5df12de8724e8190f0ae7cc9f7e36b23350d25a0b5dc64bf8a57788f1dbf2aac0ee8c94a0090e673325280d742fc1f282645f93ba70272099e0a3d54474f45d
SSDEEP 384:sxZGnBnupLOC/f/s+gvE/9Avy+HbaRmd0eKi:sYBu4C/fJgE+Hbasz
TLSH
T15E72F8066630497BCCEBD219F902BB67D6F85472D6944E48D9FCDA0C04E6BED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4d4a37281ee9f0775c400fd9148c821d2df599c43602a8d3d8404002bec854c2
MD5 99894be5d2022dc11b3c402647bf4c47
SHA1 668d3998655b3c7abce7e358958771c57e4048b9
SHA512 c42439422a87463517c53479ce24e73160e528f888931d52faa6ca792e685bf09faaa167a98b7c691be424a5a7dfb60dadae18a5124d5a0ce1340607682f051a
SSDEEP 192:sxZXQUncR/yM/jK1MlnMkC/f/s+YR5FIdp0lSRmHW6+WNnAGdYwtuYd7Ig5IJ:sxZbncpJC/f/s+g2AlHb1dbbi
TLSH
T1F762E7166A345977CCDBD319FA01BB63D6F54462A6944E48AAFCDA0C01E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 231b328f763c5208f01c1b51c4d6b77f467e50e1ff9a4202364555e715c90626
MD5 479f44bb88d9066d54f63597e6bddfc0
SHA1 e040ad5c847e4a8497fc68e97784fb7a65a01ec4
SHA512 6f5adb2a14a197aa69396c89b5a44c860d927bfe089f9ce8339198b8e2c329e85f00fdb99546a10e669b3af3cf8dbe33c509d51c9819268f3aa991e692ff744e
SSDEEP 768:2v4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dtrohzctaA:2v4jeXmWvmKLEu1jacPLZQdGOV
TLSH
T1D7D2093B284CCB7E4F844E5CEC26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ae004390-7fdd-4485-81ea-f246ff685c03\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ae004390-7fdd-4485-81ea-f246ff685c03\index-dir\the-real-index
Size 576B
SHA256 0f53a385148b4614d9e45ead30861694998f0140dd094419c009138f5c547da8
MD5 793f52dbe6cfea4b6ea046cd96b3da6e
SHA1 1ee483f77935b19a8f60179540387a1a4e22fc6a
SHA512 cf5c6dc2c6f1f538138831434439add9262e172b4abe4909f861423d809d9c6b5f11fb0f8943d8c9ad19df8e8fdd791058680d032d504df3e78607ea91951966
TLSH
T185F0AB9A5AE025C6CE219A79677259D433FD810D1687DA47803C1866071F3A24CA2210
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e49e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ae004390-7fdd-4485-81ea-f246ff685c03\index-dir\the-real-index~RFe58e49e.TMP
Size 48B
SHA256 7a596047e4d6934ada8d4a8441bc1cc2ed9f06ec9a019841ab2881491eac0b08
MD5 b3a215472d1377ffb08cc7a12193cce9
SHA1 ddb624e6ad38221e33bbfa2dfe71952248a2b4b2
SHA512 f122a299ef211e7cecfdd31e2ac23fc86a571c9f83e7bd553f56d27ba01778669b531856e808bb5ada1d232bf6f455dfa4a77b2ff19ffce9c3edeaeedaf538d3
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e2cdc392-6f45-4ca1-925b-c2acb092dcb2\index-dir\the-real-index
Size 2KB
SHA256 6e9ec0eb6e6cc9b222f1e1f5d4c3ba42eab55116ed699a6b32172ed873ca88f0
MD5 2ccc5164915909710c1ac2ad4330691c
SHA1 76252c3004a3fcab6ad8f6447c482ce000158525
SHA512 6a96e3e1925c571952dec7f79777462357ea072bc20b2ac81c93354e860b45e2435587db9e71c1cedca00773d5e6b6ad1e8d5d1f9c82c95f741c80760e056a69
TLSH
T19241664CCC90ABADEC7591FE299416F297752D38FC5CC39245A4B2B13403AA81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e2cdc392-6f45-4ca1-925b-c2acb092dcb2\index-dir\the-real-index
Size 2KB
SHA256 af0d0ce7eb21884ae65e98aed45d90d25b7aea1552753ce59e0248bd0588ca72
MD5 775089b902046b6d1f3d4f5a0b1595ce
SHA1 f66ce0825b30d1ea584e60c52b722bf4fe1697c3
SHA512 bece5b61e83d747143ac73f06ae726f33b050662726802955deeb579377c4f323125bce8f582a88651d4a188ced041806ec3d86eaed7f6c14e097f36fab42409
TLSH
T19451734CCC80ABAED87151FA199415F2A3752D38FC58C3928194B2B134536A81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5884bb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e2cdc392-6f45-4ca1-925b-c2acb092dcb2\index-dir\the-real-index~RFe5884bb.TMP
Size 48B
SHA256 bf1d72c469fefa7aa2befbe61a74e190005b081333b6dd1197d12ee03e66fd82
MD5 98271bb0145ada855a8d523f96e95fe6
SHA1 5a0997c8f762da9b52647be5671276aca061daf9
SHA512 d76823655b492ede87abb3a12c3c92e956fcdabae47a12335a7577bb42cd2067f721be874991025baccd4f8cab568e92640ee0e512538765cd241ec2a793c2d6
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 6c191b1d33e98c2a18987e2d001fd71e261bfb0ecd7ebeef99b72662a0f93bbb
MD5 d795901a71a83ca9cd2758cafd545794
SHA1 379a85031f46e24b58298c189c6520e178181622
SHA512 78251b88cf9f8e1bdcac452fabe38717c78f2408d4e8fb587736263f97b391351be12b865071e19b8f983f528e6966aca04d8e005f9b43ceaf7bdc039ca2e530
TLSH
T162D023D5633155572730AD461034655D840B4C64D880ECF49400B4D730F8A03D047474
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 f6b85379a2330fde24da38e2df0368452acb41a13d6e7a7b5d8d5c8d4e4a3d93
MD5 cdb9c147a13e129f8b3ea3ae295c1bbc
SHA1 c52b3a295ebbfe350726822ae55659f4c793dc1f
SHA512 1da01ee861fc28cd4f4a0fd530b77d8e2a10a42993b9e96f7cbc8a4f0063d3ea908aea448e4d88ea213dcfe44b253bacc13e5c3c3e275e750da529358ea17274
TLSH
T196C092E6661087DB4A34BECD2038B76ED90F8198C8C0CCF8A108B9873478913888B965
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 470380b3baed8c6d7db5d5a3019e39ddeb1405ec16b02ef2cc76a5275dd003ca
MD5 6a69dbcd528bb21378a54b603f979234
SHA1 83d60d3cac770044eb6fcbffac259a06948645d8
SHA512 356d7418ef7abfe58d526dbf2c22de018da6c591695318cf4a0cc67519dcb1585038daa13153835b862f1386c24d7a69c565b08b9194f4aa8c145c7efa5e11ea
TLSH
T160D0A7DD927146935732AA8A7034726D881B9854D880D8E86C04B48331B8502809F528
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 cbccd38f921562283595d674f4e46f1efb549dd912526af3d05ce33d0fd04f79
MD5 bffcfd886449aea1d40894d11e9e0f2f
SHA1 d2137de2306da8d4fe924d7f10328755e7d11231
SHA512 b867e46b75e6afc227cfa87169dd75a5343e4cdd17e6def0a6bf005b4d449f1df1433b1541af21a707ac3ce6483799c020ab71d3610ebe36d2b77540299a1efe
TLSH
T15BD0A7D67A5101831A35AEDD3534B2BEC60FAD4C8CC1DC6C654874467374917C0AB9A4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 bd38271ba1c8fcc00aa0b0eef288eb4b6dd3520a018b690e73f7409bce128c5c
MD5 311cf963949bc531ad8d0483402e0838
SHA1 6082fe05d11e02f1eb2abf31b866518f47edb560
SHA512 6d3062b35f7886dbbb20911965f130ff220a7f28931dc00a2b0f115aaf6b82777e5291d311f7b6f377064d0d78571815e2e0aef4b944b33c921dcf92136cd324
TLSH
T180E0684A7F62028AEE336F99793071AFD66F68048941DC2C614C3509B3B160BD026C69
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 0849f4cf811327484ed05d930c859a215ea137e1b04c7ee66a1a0e676bc09151
MD5 365323b86561e44f63ec287637136914
SHA1 7f8484c7f15ed4941d2733f283449b22554e7299
SHA512 f733f942337384b69254b86e830a94a57826a989d6e8170f4787d3a8d7708bc39ef4908693c5567bacad8c8910f788ced4ceb36c826b2b7e8d6b44352b6cc654
TLSH
T13AC09BD6551047D74A30BACD3034B76ED90F415888C0DCF8650878473278913449B565
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 e9a04159126f7ed2fc81d8b1ed1c203eb0db8ce5cf87ada2644955571efa8223
MD5 f9da87cb307223b4fd71eb911be770d0
SHA1 2fb47b65449b429b0d63b91b855ef1826eae41a5
SHA512 96205402f31e2c6cb31da935f2a1d53c4f01e3e8ff254820597c0c1803e2dc0cc8b38964ef4f5b8de90278b1ca05818992fa7893a8a0799e762f7d52f36762d0
TLSH
T15FE0684ABF62024AEE77AF98383071AED79E60048940DC2C614C2509767160BD067C6A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5877ac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5877ac.TMP
Size 137B
SHA256 ebbcbbf7a0b2a573192a7abc6d0124f8c79c3c11749cf80133728864f3aa04e7
MD5 d0564564fcc723769938a65a025a0435
SHA1 069bc3fd73b92556f9fa6c6403c3e2b85335b9c5
SHA512 87a092e8ed6f4e18693de47f901d6c64987b481f94ac750632513d1a2be89c8b951e0ea5a3735e1b3719b60a3f496462089bb5e6715c7b066c6013e6fab1bc8f
TLSH
T162C09BD6555047D7473179C91034B75ED91F4C5C8CC0CCF8650578473078913848F565
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 2KB
SHA256 dc0c6f9594cfcda94f10df58673febd57c443ea54693372b04195f5d0e074b16
MD5 da116afe1150d36f1a8defbb8fd303da
SHA1 bc28c769aeaad3ee9241d3e2131affc8a64c01ec
SHA512 f6785003a2f4afc01fa36db90d061157b7fbc202b9b0a21b82884a533871df6f3b68d28ac14bbb1a9345b9bb0e6066781bf88352b858e0c235e4e2b4c0103b8c
TLSH
T170511A8DCC896BC7DC2C21B2B4BA20C0377A18DD57848B075EEC6138BCC723D083A654
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 1KB
SHA256 95485cbcbd4bbf7aa5bf8d4d1ac2c8c679ad3d966666efa29dc7ebf7a65d4f1d
MD5 ea0503e6511fe33a8cd522e9dccf3aed
SHA1 10788225720ffb77ca2c09a72bd355051ba9d511
SHA512 a7e17520e060fc788521a71d2f1c2e73e5a9a712583723513f9d55da9577ebcd021e0efb6194c26bb9b2eaa7841cd1d07a00de440466af60405caf087d3f7eee
TLSH
T1F731634D8D90DD9FF45844B314B3B4B873708DCC4620E363887C21767E1635A169B1DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594c70.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index~RFe594c70.TMP
Size 1KB
SHA256 799d420ca995d94bff4249f8250fc07f903b30f2c57a95ea485381031166d564
MD5 0e474e5310dcdcad2659709ee261ad9b
SHA1 0e90f1a4db363b2891222d2cbd8b4316f22ce370
SHA512 77b7243a47565de948a35d585b8f9233dc7a80a97f40203690ee3230f6d4afd6a5b0fdabcf6fb9da57fc2a7c0e1455d1046b96c485f409a2301292c4ebba7506
TLSH
T14C31864B4B808D0BF4C450770DA3B4B873328C408321B393987C2279AD21B9E1E4F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 f5c1864c763cea07ab1f1b2c3062096249268b034e7ad2f9d573962c0b3899c6
MD5 bf98fdd189138e30122a316ec8c1f309
SHA1 bb4f21f144964d228da63c580abb9b475ee1ae59
SHA512 bb4a9d92bb9260be89061142949ee33845485a636d1b26e5d374c54c01360b0e59e6e74f92f7846cbae5d812ce8c51afa744b0e393c6360365dd7043c48c744e
TLSH
T1DCA0021602C17102C24222B325D7026132504DA10205136541D104CCDDD0B565D5114C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 7b867ad472ee593f4453443f9ac49219356edfefc0e7a2761c135e1120b5b020
MD5 5df4a493ac35e41aa3ad199ad4f79ee5
SHA1 fbdd48c82ceff777365480f8e60b003feee4d8e2
SHA512 56478cf7bbe077ee9dcfcde57e59b3fdc36470ac268b06cba3e67ebca94eea8a292d78e5a5cdb1b292dd3d2adf0b7c164917f8d2db8026e2671339520f4f5e9e
TLSH
T1EEA0021013800117C09B17B116DA0A823301CC345110230B4897218DDC909805E4150C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 d5e01ebed55ee55d03c64272dcdea26d1f9db93a46196502e7bf073eb1fd4051
MD5 8712400886436695e997a3681082bb8b
SHA1 0dadcd8d340e68146527014c2e93a306c508947a
SHA512 6814ebb5d66908c4875c8949edb53f05e26d17b72cde87e447d1711a7397b01572713896589a92d9cb218b7baf65150e57c83efb7e8bd22f129de1b00a4b4fa4
TLSH
T1ABE0D8F63DE72E20AC7F57E628B245A44146B4688555EC8E2416A2E751B12682416C61
MD5 SHA1 SHA512 TLSH

Submit Download

67a473248953641b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
Size 17KB
SHA256 63626b08767ea3245d3c11bf57ec1fdcd57d5a3aadee368fbcad1e08f0020589
MD5 ef918f00357a225dfc0484c5f73fc0fc
SHA1 64ff8138e054df44e7ec4176931d06332fe93ff5
SHA512 dc64bb8a905495ab7f0e942e323c0beaf1eceef4bba56c8387eb9f9c424bb6204c5683afbeece957be7af4ae0f8a0fe154df0d13f1486421723516597c2d860b
SSDEEP 384:H4KY610LWeVJSJsK0y5NnI2jChwD+BvQu+JEYc:YKYFDy5NtChwQgc
TLSH
T19E72E9B30C649437D2E1D6A196AEFF1CADBD21B718968EE4F06D55B811F0AC7034B84B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67a473248953641b_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_1
Size 10KB
SHA256 80fb2f556108b5cef228469523a5fd73eea869beae4976e2b40ae0e3b71d11ec
MD5 91a5a52836464b8aa714cafc2f908504
SHA1 5dd2e48147c9a3293090c2689fa8a5feee69dcca
SHA512 5ecb139806a51eec2aca741adf818e91ed4252e910d451f5c02fadda4e19974c9ee28fc82e5a2fd3feb1c54cf70127cfe9aecb5cfafac7c9f138e09b07d6b6ff
SSDEEP 192:PQsH/nbeDo/Z0fe0aNc3JGaiiYpw2Vm18wFcvMvS39QrL3v3TvX+:PQsH/nb1/D0Yw2VmaMvOeL3v3Tvu
TLSH
T1A732E8751C58BCD3C0E9D674A2B5DB0C5F709A8989DBCBA6A6A034BC1D802E277CF521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 191KB
SHA256 34bc43f04b7ee215845cb0fab23821c3f0352b685dd68f58452833954f65af54
MD5 1185e7778de22281ecb554eb95540b94
SHA1 5e666080a8700a1d283227179b83e4fe6e2897d6
SHA512 bb4eda2048bb8e5f4e649e3b85a4ec3e292aec51d6dba5975663ee1d065577d48a45906febfce863256a60f29d0c5a4e7dfa0fb20f2e7b427f3220bdb56f7cdb
SSDEEP 3072:8wzqBGVbMXFhc5p2zZIdSSwa9aIJBVqOycr:yXFhc5p2lIdjr9JBVqOhr
TLSH
T136144BCDB7A1B47352A744F1802F0407B239B896B80CC8B8F595DDD96E24659837BF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
Size 488KB
SHA256 f035c6074b39b02c1c49ecad1223f589b3815401c8501c86c4e89e2045caaef0
MD5 b7d5aa6e0f7634a1d22e6ef27e89bf37
SHA1 b1bbe526f55d4993da4775a60895ba15041d8486
SHA512 ab3d5991e08f3f245dee6e8c66aa81d644668173998402eb9d986844e1ae98d69b9d0f45acadcaab9b2dceda8f1d626605708a52b89bd960d8301060db8f6bbf
SSDEEP 6144:YayZZE0w15gbSN1/OL0xUTgxQKyuZND4EDGIQay4Rdu6SeU5lefqWsq/R56naT9I:YycLLuZNBlUWcoJFBjapITa/3BpqXO
TLSH
T14CB44B56A7613A53CD1743FA0563892B7779824C3F8BE3261AC1A7266C313F79C4EC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 a2bdd44e4a31a42c3ccacd9a63733b7629d5778c7df755ad30e94dca1ed48ebc
MD5 fdf33cc44236ed35fd3c81940b1ab651
SHA1 61f33941cec164bc1ee2783d36751f2e6d97a6d6
SHA512 260834b3b8d74072060d070b043849904cddb619173cc49de81e3ea3097249a144d7437336fde423744c9840dca87e440bc6629b25c6b9cbaddbf4393c327fd7
TLSH
T158B012C48CDF2C69C91C433438455055315CCD10450D42D780D410844A371849034501
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 ebc59d428ec650b89692305e5b139ebc42f720b499f4eb28b58855330e94f2e1
MD5 e7a68aa51fc7d84ed4d0078f7fda99d7
SHA1 760de3eb5d3e8d099c16163807b62027bbfe1145
SHA512 3113092a59158c90c0ef47828f14785a9b71e9f50315f865b3f184cebe6c83c72ce2f56de4f207f7c31ee0cbfc1c5c5b8273a4cbc4f75993cdc96543380ebae5
TLSH
T1A2B024D74C147011C41C477430CCC051703C4F1C070701414474007D41331C4C014001
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58da0f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58da0f.TMP
Size 48B
SHA256 51bfedb53ef074641b4b90a7d024f4bc59c2d003688ba3a8d67463bb2a7a49be
MD5 909e6478299002c77088f6ada8feb83f
SHA1 923c855ba9ba0688df58956bab224ad558ffc9f6
SHA512 72c8a0fe4058bca625deef6a6e417e6dbebbb57f143b07dd77bdc08b37e770a07c4048f2859a2957a38f06c960f9331066ae1286d00db0806443ba2887cd818e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 122484e94d225fc8b359bad4786a27098560a4c8f8c3258808c0257c0c908a5d
MD5 a87b783118db53e5227e0826349032bb
SHA1 c7b24fba8fb838507fa84b11f52331cba5028e9b
SHA512 6a9c147779cf1ddd273e8ec52ca557dfea375235c443622873c43844339b5c36e93bab02d3a4eba5b79f6b26e611878f373e8a6f607a1bd92cacc9666d4946bc
TLSH
T180A002617B504411D486127411D186426618FCA44A154B09E1D40D9ADCA05AC43A55D4
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6267d3164d74be0de65b842cb105a426d21be5099e500cf0fe952405ef2f8fcd
MD5 aa74c98a0a2da0a08b338ed3499c89f5
SHA1 6f792ea7905f6fd73ae22e3ae786f782ca026665
SHA512 c367aa947d7b4e616063cf5627203f7e521d8114bcde0f139e2367334ce50d7d74aa4b574543bf0c85a14b242df3d0ce28441a1597ee71376a05eb7c2b9ad831
SSDEEP 96:KPYDMoGi+cmypHUwcKsJUecI4oJ24Bp65OaQwgSmdcWUx/KsuUP/ILDUtb4Jco6i:UlXK4Jco6GK3OT8QkFgyvAQjS49H2r68
TLSH
T17291015135BB03122D7D350C819097278A86B1B3325DE93F3BAC16664EA7E128DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f220182-9616-45ce-825e-d82bb997ccdb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2f220182-9616-45ce-825e-d82bb997ccdb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ccb1a357ea1a2f1f5e023abc1f12d5bbac27e0b5858df873fc61d974a44e5230
MD5 e0ebca513082868c190cdc931dd15b1a
SHA1 7079833580eff84730f4ad62c346ccb52b032139
SHA512 c9dfd6eb2a361a19c34e56f5fd73ca192a7ab128702da0887fd97e8c10762c866f96f58ff9882edb30cdac2f1f0501fdbff4762cf100ab8cb158905fcb26231b
SSDEEP 384:0tNn/s3n9SfsNSIWwxapEYuf+682IXeSxtFCUOObjI9G6w7Zn:0j+9UapGPD29MZ
TLSH
T147928D3658696C338DD29A52F05B36279FF4417B8BCA2F88E5ECAF0D01DB5AC4302912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5939f7249a0927a70c94ccd81a5a1cab484211683ddbc84542401225df733d22
MD5 b5e7732973d64d9db6dca0ddebf7544d
SHA1 3fbf4c5670784661f90e8a10ab1b0dd557a83ff5
SHA512 db529ec4ebaae46fea7d0b26e28e8cb4d77cda37dc4ebc67c8f752a6d2bacaa3abdb5a5555f288a3f75bdbcb2207d0b3be42b1218421636504c8b17cac31187d
SSDEEP 192:EONQ6hZ0QmiUy3Lpc/+jV0jzor2e5wOZ8dlU6:EONQ6owpu+682t2UlU6
TLSH
T1B502C935A8686C7B8EF2AE45F48737235FE5116BA9956B84DAF85B1C00C769C2307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3c01c1962e6025a5e78bb02015c27bf4d7ef6914e944a10c65ab64873ac9c103
MD5 2729a2be34ef1aac27c308a7acf7af13
SHA1 28b75cc9fdb3335fa0e5fde2bc5e8e6b04fe29af
SHA512 aacb1bd2df6cb9b2e131987b99f31037bb77252f731e33f40cb74a811b332f3e029711765130c6848b36228af1db4999231e9ac21cfcc50c9a5805c9d66218e8
SSDEEP 192:eONb6hZWQmiUyPmLzc/+jV0jzor2IXQN2Lh5cOqtqVUU6:eONb6uG2zu+682IXeSk9CUU6
TLSH
T13512FA366868AC675DD2A641F09731135FD44127DF8A7F84E6EC5F1C01DB6AC2346813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 350f2afbe1e2921d1ac3caa959d6494d2fdf4ec914d76efc5a3d7a952496ff07
MD5 de6f9d80d869c108d5700aced525ef59
SHA1 e2a1a27d1c3980c665712abd58d481c4b173e26e
SHA512 30e21f2062fcc7f78f03d82cd2e264e4b2ff35aaa5dc3b0bd5f034c6fc8856a72be1cccfd3a1d325f577ac57ce990d56cc9ab08fc1f8cc5465ada7ae94eb17bf
SSDEEP 384:miF1tNn/s3n9SNzsNq8TUNTUlIlJTwwxDpsYP2f+682IXeSfpFCUOObjI9G6w7Zn:NF1j+9+vwgCKmGBD29MZ
TLSH
T19FA27C3798989D379DA28F55F55A36278FF441B7CAC66F84E6DCAF0C01DB1AC0306912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 919bdb8879ce81e6c13722d15176dc9cc082c0c5130425f1f73297c4b5f05b0f
MD5 9fc557cad3286c93de023d0ae41d15c8
SHA1 597c1589d1c5e447077a2522c17f36df0a1e8010
SHA512 aa774ad9011125455b8643af87be9f27ea3dbfd0962e534139b0b9ec64f37ee511430dce4e19c444adf0eb13daa5a1c43f070865a439699cc22ecf83f85031bf
SSDEEP 384:miFiBtNn/s3n9SNGsN28TUNTUlIRJTJwx50mYP2f+682IXeS7iFfKvGP4B9Bi/qP:NFqj+9r3wgsKmGmcS4Dcqtf29MZ
TLSH
T180F239E284D64CB6C49D9BC7637DAD125ABCC137B5494948B3F8AA2CEC9B4BFC301811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9292056c30cccaf12f47a3853f2f0e7f8aa0eafa7c0bcf06098bdbd0a49eec9e
MD5 ee648cd690b6aa56c871dcd3cd81db4c
SHA1 285f64b7d1b8a460d8ad9649f9ef9a45db19fad6
SHA512 29c61891470bdf378de91e9d301cc1febcbbe97d977db8b002cf37dbbd521cdc54975f10f95a050d4875e5af6493885b81f30814612a9084f30803db89acd4ca
SSDEEP 384:rtNn/s3n9SfsNSJWwxap1Yuf+682IXeSxtFCUOObjI9G6w7Zn:rj+9UypGPD29MZ
TLSH
T1B8929E366C696C338DD29A52F05B36278FF4417B97CA2F88E5ECAF0D01DB5AC4306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7e5508ad21019593034fd2cb13d75c59ef6b604dd486ef3076fc54113b88e1ba
MD5 b38fd560708a26afe7c5469ddcdcb41b
SHA1 5205ff19dc86b60f393d52aa3e7c8f77c7a7eb97
SHA512 e6c0708825d33c5e937138972e18329f96215368ef2d965875150f748bdbc1d5b620e9c1c8b04a5967793dcc8c3d88ddc4a056af67ab8d4d9aa5c140cbde7f88
TLSH
T1B5E0010562000A7AC43C0330108B1B24AEE1961903E3068546A585681E2A3042A35EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cf306437c662d37bf6f0e0a4c9f7518720da7973f817f06b89751391f3bfdc4b
MD5 7bdbcdc089a6eef8af7bb09c7f229f6c
SHA1 b94b00fd84fc40615f4a6a7173d2181573acff15
SHA512 2e1742c572ba89271bde7a3af694051c6f591fa4f7d17b09b618e7349f1b3493f884ca714ca4c18e081c8e48099c41d867655a0225c6fa47f5835f02eb2b3ec1
TLSH
T1EAE00105A3000ABFC43C033010CB1B34BEF2D62903E306854AA589782E2A3042A35EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 938184640322b26008e4480a5c2960ddcfa2a7ba90b1038c8dc654cd76690457
MD5 7540696b77c5e6a6b4187e0f65e42a61
SHA1 684d18d0a3abbd07e7a700154907ae74adae41fb
SHA512 83cf90dd5f61731a020daa1db602dcfd016c010e6d724ee6f874ee8ee32a5713a4ac15e2357b08894c7311bebcc259817980132d943ff78f055777f41817e0bd
TLSH
T1BBE0020462000A3FC43C033010CB1B307EF0D60803E3060542B5857C1E3A3002731EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 40ad7c5bf77a5b6602ba16f017ed1d5f1b9e8b98b4ea97cc8a36bce3449bf359
MD5 c16e69d56bfecb261622284512e2115b
SHA1 51effcb4e9df5b6855dfd7a170950c3bed351b22
SHA512 9ff477c41045ec2a5b741f11f2e0632a0c284759213ff9e2e9686ae037b7e579f3332561024ea30bfaf64e8856b70cb1744c3ce1ce3b9f04be263ae020bfd416
TLSH
T1A4E00906E30005BBD4AC073104CB1B287EF2E52607E71A969AB589BC2E3A3483939E94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 926520d04472503c9a20bf551feca8aa596e7a940748c3405a1f10090e03a3b7
MD5 49a25f279882ae781a85e43d123a628b
SHA1 36fdf089b01e83b51a9a95a85034b9219ee2ffec
SHA512 45af6f1958e97b285e32d07022c4bb4c78febc870cdd812cec361e903d63c4da2c2a96d895277aa617699839073b52d9ed06896d0a22f94c73bbf5e82f902c71
TLSH
T1D5E00906A30005BBC4AC073104CB1B24BEF2A52647E70A854AB549B82E2A3082A39FC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a34cf877098d5b68dcb63c9a1b82551908d07db549ef84a3d4f135aac06d396b
MD5 bcd7afe9c620bb50b1c868139d9b0222
SHA1 416f5fd831e3bd88f452785c647db5aa99f7d963
SHA512 80f96ade148e8827f99fbf0e1c20dc7ee2a4d640c030d13c5b03df0ce78392400e7d755184f6360620a4ae29f8b571fcb636e41938f9acfa6cd8f1d125b8822f
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe58fb34.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58fb34.TMP
Size 392B
SHA256 bdca7cb180b2fdcc1a99cecedf20a063c41a91916ee80dfab7a04069f6a04ae1
MD5 435132a591a607fb963657313821bf8a
SHA1 10f99e934bfc6eacecf4f1b9a4d509c15d939c94
SHA512 cab8c53682115d1dfa881bdad64d1b62ca81c4143bdc1543a5462040befa267328ec21238ca2e1ec87c5fd79aae94819827f27e610b30b545f8819482d5c66fa
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7387ad18c4ae74bee6a7c8e5ff80c663c55d74611ffa4054b971e97c6610a9a3
MD5 140d58c0917f227f01f12feb970b52ed
SHA1 e63364b1d335f239d738d865d59d8dd2d3284c68
SHA512 e60b432f506c9f8979e972a19f2ec1cd9ffe4946966135fe45866f133f7ec1c4df990cacc063e490aae870270181fedb4e8a48eedbb01b6fc0e0f9e2e126ecb7
SSDEEP 3:MsEllllkEthXllkl2zE5exkl:/M/xT02zSn
TLSH
T178440444FFC10435C50014754013C35013F1F414051D5F4334D504135CC555C5C10314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a2ca183bbafeb30925a47a2c34fabb5224e75afead32e70cdb51f6647768a32a
MD5 5d3253addffb7d34b02a404f96882085
SHA1 b9e433c91bccbe9a90c0996286532f407c7a83eb
SHA512 910e9fcd36cc345dc05c98f9459805f7c9f8e11615f8f723d985806698c8dae595cb4c3cb7d2cb31de50701a77c9d24b13ca7c334b29403455f450aed45949e0
TLSH
T1C2412A58AAEE1148B3B77E5AAFF6A46D487B7C732F4B955E10110D4F0A67B00C861B33
MD5 SHA1 SHA512 TLSH

Submit Download

WndTransp.mfx

Path C:\Users\Admin\AppData\Local\Temp\1bd35b37-8f0e-49e9-aec3-abaa45963d81.FusionApp\WndTransp.mfx
Size 65KB
SHA256 e8a1af555a3d39b1cb0c6bf6511158d4fd48a1e4e2dac60a6f54af4b486f60a1
MD5 6f93111ce72225daab2bcdceee48d204
SHA1 1a5156f6e00b47dd4197c933092578aef49a66de
SHA512 44549a2f29c9b4cb217065cc4f670afe84691fcc9d0bb4898cd8caa408256015b1abc1c29b6ce4083207e56f339f0843757ae07d01e2a2bb945b6ddaa4c8d3f7
SSDEEP 768:CQqAjo6u2vN/mxxB6uKRpc9Em+FtRuFWPhD2F7a3bgW25GmoZiV7dOa7r:CQqI3v9mxD+dts9F7e25GmoZiV7dOa
TLSH
T124637D107290C072C06B79355866D3229A6DBC71AFF8D9877FAA077D1F313D2A63A316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 98bfa2c4671bd9c5d0c8a2fbab0f50756db53edb3aa9b6fa060028457b439c37
MD5 a5eaad556c81d55d9f15ee40c69e0e9c
SHA1 21aafa7a113de5da413cd789666a499ac36d9654
SHA512 29bab1b9ca3c2661221ca5db2890bde800beb6b44b829ca6581347151980b34c22c6aa106cb188112d796170c18c5fedae661977a8da78c589dd53cea7058257
SSDEEP 96:V/J+Fwpwuo8SJ44TwmM+vHsJrukrQ8hJnIukMG:RClxvM5AeBIwG
TLSH
T11402D240A7EA2646F3F7D9B2A5F36711BF3AB8065A149E4E408081090C62F01D97EF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Holzer-safety.exe

Path C:\Users\Admin\Downloads\Holzer-safety.exe
Size 133KB
SHA256 933ff2091575b19eb0a48a7ae9785644aac73a4cd28c5fdd8b36017ab75bb00d
MD5 fbd61725e4140530e3e883d09329944c
SHA1 02d8a39994248e69a37dd5d6bcf98481544f8860
SHA512 2a1f0fd8ef0258c0c00a18082fdf45ec3916f15dbb09ec39b5d3b72144368bb02894a4f04ffb14475eb0c77ac3b7709ede062d87b888b2f83ca0e2aecf2b1090
SSDEEP 3072:yjAQNTa0ln/cg6/6joeCOyuIyDFnTTTTTHvvvvv9A7l:yBNrlU32Bhyl
TLSH
T171D36D50F4D1D873E23349302C74EAA58E5CBDA49F108DBB32D4772E0A791D25A36DAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

funny.exe

Path C:\Users\Admin\Downloads\funny.exe
Size 84KB
SHA256 660c022b56399b3333c47ea9513d68b40b851c16d6adc772b2305177e481cb5b
MD5 e429133904d4c6693c12016b3d52a6e0
SHA1 16961eedd4f9c50a38292f421b10f9acf696245a
SHA512 e45bd6f74e3785f8f7dc0efa7db8477813613880946e72db8bd17b5489921aab5387f54bce0e5e800a24cae445817144743e23744e07cde55366b4e6b11d22f9
SSDEEP 1536:lg/xv/ETkczmGhij/I6nhj2GvOhCJqzsWw0ncdC54ejvKl:It/EoovQj/Xn8qqe0WCGe2l
TLSH
T180834B11F4D2D8B1E576493414B9DAB15A3DFE200B218EAB37AC162F0F781D09936E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

username-666-interactive-experience.rar.crdownload

Path C:\Users\Admin\Downloads\username-666-interactive-experience.rar.crdownload
Size 11.3MB
SHA256 9c1faf1f7a9f338a2924f3940b9d8b014c0f0f62b59c27103e18e7bcd67bc86f
MD5 db1ac56004635625408d4b7fec1a5353
SHA1 ffb14d28df0f0b7cdc51c09ed1f1d4a43b2198df
SHA512 351c55638f952f7e657f3989eb1dc43be08a0c7001a0e947f02ee38996662c80c5a6c73f09ca9ea7e150192f38deba11fe0a970b4459b7923bdfc2dd4f5757a6
SSDEEP 196608:v8Cv6YJ46wzIe3TVG6uCpu5wnEKLGyXKPTwGHRP5To2+b2GBmtoRbUdardasriA9:v8u6YJ46IHjVBu5wFB6PTw5b2q1uYrdZ
TLSH
T111C6339258D7CF503BE9EB4658ADF99771321AFE40E64D840AC17F88D5DB28A1E0EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/8280-3524-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3530-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3522-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3523-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3526-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3525-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3527-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3528-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3529-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3521-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3520-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3519-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3002-0x0000000003880000-0x00000000038A4000-memory.dmp

Download

memory/8280-2982-0x0000000001140000-0x0000000001155000-memory.dmp

Download

memory/8280-3518-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3517-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-2972-0x0000000002960000-0x00000000029C0000-memory.dmp

Download

memory/8280-3516-0x0000000001110000-0x0000000001120000-memory.dmp

Download

memory/8280-3515-0x0000000001110000-0x0000000001120000-memory.dmp

Download